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marketing!  Amazon  paid  big  for 
l-librarian  Alexa.  Here's  why:  It  tracks 
where  we  go  on  the  Web  and  what  we 
buy  when  we  get  there. 

BY  QUENTIN  HARDY 

WEB-WATCHERS  WERE  A  LITTLE 
puzzled  in  April  when  Ama- 
zon.com paid  $250  million  in 
stock  to  acquire  Alexa,  a  little-known 
shop  run  by  techie  Brewster  Kahle. 
Alexa  had  just  completed  a  canvassing 
of  the  entire  Internet,  chronicling  150 
million  Web  pages  totaling  2.3  ter- 
abytes, from  the  profound  to  the  trivial. 
But  it  didn't  seem  like  a  real  business. 

The    doubters    are 
about  to  see  why  Alexa  is    "|t  WaKeS  INC  U|)  ill  tllG  mUllHc  Of 
hot:  It  offers  a  great  mar- 
ket research  tool  and  a    tile  lligllt,  SCareii.  1*111  WOTMCd 
sweet  way  to  steal  sales. 

By  tracking  what  sites    bCCaUSe  I  kllQW  tOO  HUtCll." 

are  where — and   who 
goes  there — Alexa  gleans  insight  into 
mass  consumer  behavior.  The  knowl- 
edge comes  from  a  new  feature  called 
Zbubbles,  which  gives  online  shoppers 


wakes  me  up  in  the  middle  ol 
the  night,  scared.  I'm  worried 
because  I  know  too  much." 

Web  sites  already  use 
"cookies,"  tiny  files  that  re- 
side on  a  user's  PC  and  pro- 
vide data  on  which  pages  he 
views  at  a  particular  site.  But 
one  site's  cookies  don't  track  a  user's 
other  Web  visits.  Alexa,  by  contrast, 
goes  much  further,  collecting  data  on 
all  Web  activity  by  any  user  who  signs 
up  for  it.  Its  database  now  holds  20  ter- 
abytes, twice  the  size  of  all  the  printed 
matter  at  the  Library  of  Congress.  That 
lets  Alexa  compile  data  on  what's  hot 
and  where  the  Internet  is  growing. 

In  return,  Alexa  users  get  such  in- 
formation as  how  much  traffic  a  site 


real-lime  price  and  value  comparisons. 
That  will  give  Amazon  a  crack  at 
sales  at  rival  sites,  not  to  mention  steady 
info  on  what  is  bought  and  how  buyers 
like  what  they  get.  That  data  trove 
alarms  some  privacy  advocates.  Even 
Kahle  himself  frets  the  dangers.  "It 


gets,  whether  other  Alexa  users  like  it 
and  where  previous  visitors  have  gone 
from  there.  "The  important  part  is  the 
connections,  not  the  data  itself,"  says 
Kahle,  an  MIT  graduate  who  built 
supercomputers,  then  worked  with 
Dow  (ones  &  Co.  and  the  U.S.  govern- 
ment before  studying  library  science. 
"You  find  out  what's  important  when 
you  find  out  where  people  are  going." 
Alexa,  named  foi  the  legendary  3rd 


0     U     T     f     R     tl     N     T 

Mo  'X 

century  B.C.  library  in  Alexandria, 
Egypt,  uses  a  software  "cobrowser"  that 
accompanies  Netscape  Navigator  and 
Microsoft  Explorer  and  records  each 
stop  on  a  Web  journey.  When  the  co- 
browser  has  Zbubbles,  the  screen  carries 
a  tiny  gray  "z"  that  turns  yellow  when- 
ever it  hits  a  Web  page  that  has  been 
tagged  as  offering,  or  even  mentioning,  a 
product  for  sale.  Click  on  the  colored 
character  and  up  pops  information  on 


the  product's  price  there  and  elsewhere, 
and  what  other  users  thought  of  the 
product.  If  Amazon  sells  the  item,  the 
bubble  has  a  link  to  put  the  product  in 
the  user's  Amazon  shopping  cart,  by- 
passing the  competition. 

Kahle  already  has  distributed  a  million 
Zbubbles  in  the  test  version  of  the  new 
software,  and  when  the  product  debuts  in 
the  next  few  months,  he  hopes  most  of  the 
people  who  have  downloaded  Alexa  soft- 


■f 


ware  (4  million  and  counting)  will  use  the 
feature.  As  privacy  protection,  he  cuts 
e-mail  addresses  from  Alexa's  listings,  so 
even  a  subpoena  couldn't  elicit  which  in- 
dividual went  where. 

Alexa  vows  never  to  share  its  infor- 
mation on  consumer  behavior  with  any 
third  party.  Of  course,  the  second  party 
in  this  deal  is  Amazon,  and  chances  are 
the  Web's  biggest  retailer  will  find  a  way 
to  use  Alexa's  data  to  its  own  benefit  F 
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U.S.  e-commerce  in  health  care  will 
reach  $16  billion,  a  150  percent 
increase  over  1999.2 


Online  business-Services  revenues    Average  time  spent  online  in 

will  climb  to  $43.7  billion,  almost     the  us- wi" '"crease to 8.2 
double  last  year's  $22  billion 2         u0urs  per  wee,k- up  from  7-6 

j  r      umiuii.  hours  in  1999. 

$450  million  will  be  spent  online  to  purchase 
prescription  drugs.2  3.8  million  households  will 

invest  online,  a  23  percent 
increase  over  1999.2 
28  percent  of  online  shoppers  will  buy  online  after 
visiting  brick-and-mortar  stores/   unique  hosts  on  the  weh  m 

U  online  ad  spending  will  reach  $5.4  billion,    '7Z£  ZSE£P 
up  from  $2.8  billion  last  year.2 

More  than  32  million  adults  will  go  online  for 

game-related  Content.4         H  million  U.S.  households  will  make  their 

first  purchase  online.2 

Almost  50  percent  of  all  Net  surfers  will  have  their  own  Web  sites  by  spring.' 
DialUO  U.S.  households      La,in ?'nerica wi" see ,he W0llds '^est percentage 

will  climb  to  35  million,  '"   ' ailver,isinE: '" percent  t0  $12' million-2 

up  from  32  million  in  1 999  3   60  percent  of  Net  sll°PPers  will  bookmark 
°  J-     an  average  of  seven  shopping  sites.' 

O.S  business  trade  over  the  Net  will  skyrocket 
to  $251  billion,  up  from  $109  billion  in  1999. 
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2.3  million  The  U.S.  online  population  will  reach 

U.S.  households    137  million,  less  than  50  percent 
will  use  cable-     of  the  nation's  population.' 

m006n1  3CCeSS,  9  million  new  online  gamers  will  try  their  luck  on  the  Net." 

almost  double  the  worldwide  IT  spending  will  reach  $908 

1.2  million  in  1999. 


billion,  up  from  $835  billion  in  1999. 


Market  research  firms 

will  generate  $255  million 

in  revenue  from  online  research. 


25  percent  of  U.S.  adults 

will  visit  international 

Web  sites  on  a  monthy  basis.4 


U.S.  online  retail  revenues 
will  hit  $38.8  billion,  up  from 
$20.3  billion  in  1999.2 


45  percent  of  U.S.  adults  will  regularly 

USe    lOCal    COntent  SiteS.  20  percent  of  U.S.  online  shoppers 

will  use  downloadable  coupons.4 

14  million  new  U.S.  households  will  go  online,  up  from  7  million  in  1999.' 

53  million  adults  will  search  for  entertainment-related  content      Net  ad  spending  will . 
online,  making  it  the  most-sought-after  online  category.4  cHfTlb  to  $4.7  billion.3 

7  million  investment  accounts     B-to-b  e-commerce  will  be  less  than  half 
will  be  handled  online  of  trade  via  prjvate  electronic  networks.6 

upTrom  5.4  million  in  1999. 

online  garden  and  tool  purchases     Online  pet-supply  purchases  will  reach  $800  million, 
win  jump  433  percent.2  up  fr0m  $300  million  in  1 999.8 

Worldwide  Net  advertising  will  almost  double,  reaching  $6.5  billion,  up  from  $3.3  billion  in  1999. 

28.4  million  U.S.  35  million  U.S.  surfers  will  North  America  will 

households  will  shop     hunt  for  music  content  online,      ^l^8"  °A  " 

„_  .  ..       .      .  +nnn     ....  spending,  some  $444 

online,  up  from  1 7.4     spending  about  $700  million 


million  last  year. 


on  CDs  and  cassettes: 


billion,  up  from  $409 
billion  in  1999.1 
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SITES  ON  SALE 


<b 

rA  Perhaps  no  area  of  the  Internet  Economy  is  more  ripe  for  M&A  activity  than 
online  retailing. 

One  faltering  retailer  is  already  a  prime  candidate  for  acquisition.  Just 
before  the  new  year,  Value  America  warned  that  sales  would  fall  below  expec- 
tations and  said  it  would  cut  its  workforce  in  half.  The  company  announced  it 
would  evaluate  "strategic  refinement,"  a  euphemism  often  used  by  firms  seek- 
ing a  buyout. 

Some  analysts  think  M&A  activity  in  the  retail  sector  will  be  slowed  by 
struggling  retailers  with  few  assets  worth  consolidating.  But  others  say  such 
companies  could  be  good  buys  for  land-based  retailers  that  seek  entry  to 
e-commerce.  In  1999,  for  instance,  retail  chain  KB  Toys  teamed  with  Brain- 
Play.com  to  form  KBkids.com. 

Mergers  in  online  retailing  undoubtedly  will  take  various  forms.  Some  strug- 
gling online  companies  will  seek  to  reshape  themselves,  others  will  try  to  buy 
their  way  into  new  niches.  Some  categories,  such  as  apparel,  should  be  big 
enough  to  sustain  multiple  players  if  each  appeals  to  a  specific  segment  of  the 
market.  On  the  other  hand,  categories  in  which  products  are  commodities, 
such  as  consumer  electronics,  pet  supplies  or  gift  certificates,  are  likely  to  be 
less  forgiving  of  second-tier  companies. 

"There  should  be  consolidation  but  I  don't  believe  all  categories  will  be  rep- 
resented by  single  brands,"  says  Tod  Francis,  a  general  partner  at  Trinity 
Ventures,  a  VC  firm  in  Menlo  Park,  Calif.,  that  has  backed  such  online  retailers 
as  800.com,  iMotors.com,  Della.com  and  Internet  Diamonds  (recently  renamed 
BlueNile.com).  r 


Anthony  Noto,  an  e-commerce  analyst  at  Goldman  Sachs,  thinks  most  com- 
merce categories  will  end  up  sustaining  three  or  four  major  players.  "In  a  par- 
ticular sector  you  may  see  players  who  are  No.  5  and  6  combining  to  become  a 
viable  No.  3,"  he  says. 

Noto  expects  online  retailers  in  narrow  market  sectors  to  reach  into  adjacent 
categories  to  attract  customers  and  revenues.  An  online  grocery  store,  for 
instance,  might  consider  acquiring  a  pet-supply  provider  or  even  a  Web-based 
pharmacy. 

MyPoints  andjsletcentives,  two  companies  that  offer  one  piece  of  Internet 
marketing,  will  likely  be  targeted  by  larger  online  advertising  and  marketing 
firms  that  want  to  broaden  their  platforms,  expects  one  venture  capitalist,  who 
spoke  on  condition  of  anonymity. 

Analysts  do  not  anticipate  that  the  heavyweights  will  rest  on  their  laurels 
in  the  year  to  come.  Amazon  and  eBay  are  expected  to  invest  in  companies 
to  spread  their  franchise  into  new  categories,  technologies  and  regions. 

That  was  the  strategy  behind  a  number  of  Amazon's  big  buys  last  year, 
most  notably  a  string  of  three  deals  involving  $645  million  in  stock  that 
was  announced  in  April.  Primarily  a  seller  of  books  and  music  at  the  time, 
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The  dollar  value  of  mergers  and  acquisitions  involving 
Net  companies  more  than  tripled  from  1998  to  1999. 


$1,750; 


$1,500 


$1,000 
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Amazon  gobbled  up  Exchange.com  to  expand  into  rare 
books;  it  also  acquired  Alexa  Internet  and  Accept.com  to  get 
tools  for  improving  navigation  on  its  site.  The  company  also 
made  sizable  investments  in  online  retailers  that  comple- 
ment its  core  business,  including  Della.com,  Drugstore.com 
and  HomeGrocer.com. 

EBay,  meanwhile,  has  bought  its  way  into  businesses  that 
fitTtTemphasis  on  online  auctions:  international  operations 
in  Germany,  Butterfield  &  Butterfield  for  high-end  auctions 
and  Kruse  International  for  auto  auctions.  Recently  eBay 
absorbed  Blackthorne  Software,  a  company  that  makes  it 
easier  for  active  sellers  to  manage  their  auctions.  Some  ana- 
lysts have  suggested  that  eBay  might  now  move  into  the 
business-to-business  space;  indeed  it  already  has  made  an 
equity  investment  in  Tradeout.com,  a  site  for  surplus  corpo- 
rate materials. 

The  business-to-business  side  of  e-commerce  is  expected 
to  see  heavy  M&A  activity  in  the  future,  though  the  sector 
is  generally  thought  to  be  a  year  or  so  behind  online  retail- 
ing in  that  department.  Only  a  few  b-to-b  companies  have 
made  their  public  debut  but  dozens  more  are  expected  to 
list  their  shares  in  the  coming  months  -  and  then  pursue  the 
same  M&A  strategy  followed  by  firms  that  went  public  in  the 
past  couple  of  years. 

Want  a  glimpse  of  what's  to  come?  Consider  the  skyrock- 
eting valuation  of  Tradex  Technologies,  a  Houston-based 
company  that  sells  infrastructure  software  for  set- 
ting up  Internet  exchanges.  Tradex,  which  Ariba  plans  to 
acquire,  saw  its  value  jump  from  $100  million  earlier  in  the 
year  to  nearly  $2  billion  in  December,  when  the  deal  was 
announced. 
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I  Net  Mergers  Triple  in  1 999 


Mergers  and  acquisitions  involving  Internet  companies 
accounted  for  12  percent  of  the  total  number  of  deals  in 
1999,  up  from  4  percent  in  1998. 
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"Some  [investors]  think  they  left  some  money  on  the 
table,  because  [Tradex]  could  have  been  a  $4  billion  to 
$5  billion  IPO,"  says  Daniel  Aegerter,  Tradex's  chief  execu- 
tive. "We  were  ready,  locked  and  loaded  to  take  this  out." 

So  why  didn't  he?  Aegerter  says  that  route  would  have 
brought  the  company  money,  but  also  would  have  isolated  it 
from  the  large  networks  that  are  emerging  in  the  b-to-b  mar- 
ketplace. Aegerter  calls  Ariba  one  of  the  "gorillas"  in  that 
market,  and  he  thinks  it's  better  to  be  on  Ariba's  good  side, 
even  if  that  means  a  little  less  cash. 

Tradex  wasn't  the  only  acquisition  by  Ariba,  which  went 
public  in  1999  and  quickly  reached  a  stock  market  valuation 
greater  than  $10  billion.  In  November  it  scooped  up  Trading 
Dynamics,  an  auction-based  marketplace  for  suppliers,  for 
more  than  $400  million  in  stock.  Meanwhile,  Ariba  rival 
Commerce  One  swapped  cash  and  shares  worth  about 
$230  million  to  acquire  CommerceBid.com. 

Now  other  b-to-b  procurement  companies  are  looking  to 
take  similar  steps.  Firms  like  Intelisys  Electronic  Commerce, 

"The  Internet  is  a  Wild  West  land 

grab,  and  M&As  are  a  key  part 

of  the  dynamic,"  says  Ken  Sawyer 

of  Prudential  Volpe  Technology  Group. 

a  second-tier  provider  of  infrastructure  for  online  market- 
places, know  that  if  they  want  to  compete  with  Ariba  and 
Commerce  One  they'll  need  auction  services.  Intelisys  board 
member  Ray  Fattell  says  his  company  "absolutely"  will  have 
auction  capability  and  will  consider  making  acquisitions  to 
meet  that  need. 

A  possible  target  for  Intelisys  -  and  for  other  companies 
seeking  to  develop  b-to-b  exhanges  -  is  Moai  Technologies, 
which  makes  auction  software  for  just  such  exchanges. 
(Ann  Perlman,  Moai's  chief  executive,  said  in  an  interview 
in  December  that  the  company  was  raising  another  round 
of  venture  funding  and  was  not  involved  in  any  merger 
talks.) 

The  motor  behind  all  this  merger  movement  is  the  trend 
toward  b-to-b  trading  exchanges.  While  there  are  about  200 
such  marketplaces  in  various  niches  -  from  office  supplies  to 
truck  parts  -  only  a  few  are  gaining  critical  mass. 

Kenneth  Fox,  managing  director  of  Internet  Capital  Group, 
a  holding  company  with  stakes  in  28  online  marketplaces, 
predicts  leading  b-to-b  companies  will  consolidate  their  hold 
on  their  marketplace  niches,  then  seek  to  expand.  A  plastics 
company,  for  example,  might  look  to  move  into  chemicals. 
"There  are  going  to  be  consolidation  opportunities  across 
process  industries,"  Fox  says. 

"These  [online  marketplaces]  tend  to  be  winner-take-all," 
he  adds.  "You're  going  to  see  No.  1  buy  No.  2  and  3."  n 
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RSVP@myparty . come 

Web  sites  take  care  of  event  invitations  so  you  don ' t  have  to 

Carrie  Kirby,  Chronicle  Staff  Writer 

Thursday,  January  20,  2000 


As  he  planned  a  publicity  event  for  his  Atlanta  Web 
guide  company,  eTour.com,  Jim  Lanzone  had  one 
worry. 

What  if  he  brought  Mahir  Cagri,  Internet  superstar, 
from  Turkey  to  San  Francisco  and  nobody  came? 

Mahir  rocketed  to  fame  when  Internet  hipsters 
forwarded  the  address  to  his  clumsily  constructed  Web 
page  around  the  world.  Naturally,  Lanzone, 
eTour.com' s  vice  president  of  marketing,  turned  to 
the  Web  to  promote  the  event . 

He  used  Evite.com,  an  online  invitation  site  that 
allowed  him  to  fill  in  a  template  describing  the  event, 
paste  in  the  e-mail  addresses  of  about  300  people  in 
San  Francisco's  Internet  community,  and  send  it  off. 

When  the  recipients  got  the  e-mail  containing  their 
Evites,  they  saw  who  else  was  on  the  guest  list  and 
used  that  information  to  help  them  decide  whether  to 
R.S.V.P.  The  guests  also  had  the  option  of  forwarding 
the  Evite  to  more  people.  Lots  of  them  exercised  that 
option. 

" vWe  had  space  for  500  people,  and  two  days  before 
the  event  over  3,000  had  R.S.V.P.d, ' '  Lanzone  said. 
The  Evite  went  out  six  days  before  the  party.  ""It 
certainly  took  on  a  life  of  its  own, ' '  Lanzone  said. 

Evite.com,  based  in  San  Francisco,  is  the  most 
established  player  in  the  online  invitation  market,  but 
it's  a  field  that's  getting  more  crowded  as  portals 

jump  into  the  competition  and  smaller  companies  rack 
up  venture  capital . 

An  online  invitation  goes  a  step  beyond  e-mail  because 
it  provides  a  temporary  bulletin  board  where  the  host 
and  guests  can  interact.  As  people  R.S.V.P.,  that  status 
shows  up  on  the  site,  too. 

Yahoo  Invites,  with  functions  similar  to  Evite.com' s, 
debuted  last  week.  Yesterday,  Redwood  City's 
TimeDance.  another  event-olannina  site,  announced 
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that  its  invitations  will  be  incorporated  into  the 
calendar  function  of  Snap,  NBC  Internet's  portal. 
Another  company,  Event411.com,  handles  invitations 
and  also  offers  features  such  as  online  gift  registry  and 
budget  tracking. 

For  most,  the  business  model  is  not  advertising  based. 
Instead,  the  idea  is  to  attract  someone  who  is  planning 
an  event  and  then  sell  her  a  pinata,  movie  tickets  or 
some  other  piece  of  merchandise. 

Menlo  Park's  Mambo.com  yesterday  started  tapping 
into  another  source  of  revenue:  It  added  credit  card 
functionality  so  a  host  can  collect  money  from  the 
guests  for  tickets,  fees  or  any  other  cost  associated 
with  an  event . 

The  guests  pay  by  any  major  credit  card,  Mambo.com 
collects  the  money  and,  after  the  event,  cuts  a  single 
check  to  the  organizer.  Mambo.com' s  cut:  $1  per 
guest  plus  4.75  percent  of  the  total  funds  collected. 
The  host  can  pay  the  fee  himself  or  pass  it  on  to  the 
guests. 

Hosts  who  had  tried  the  online  invitation  services  said 
they  ease  party  planning,  especially  juggling  the 
number  of  guests . 

VXI  liked  going  back  to  see  who  hadn't  decided  ye,  and 
then  sending  (the  Mambo  invitation)  off  to  more 
people, ' '  said  Dani  Atencio,  who  used  Mambo.com  to 
organize  a  January  2  brunch  at  her  San  Francisco 
home. 

More  than  a  thousand  people  showed  up  to  meet  Mahir 
at  the  Hamm's  Building  December  15,  but  the  crowd 
was  spread  out  between  7  p.m.  and  12:30  a.m.,  so  no 
one  was  turned  away. 

People  are  also  using  online  invites  to  plan  book-club 
meetings,  birthdays  and  even  weddings.  Imagine  the 
awkwardness  if  400  guests  showed  up  to  share  a 
birthday  cake  made  for  2  0 . 

Not  everyone  sees  all  this  functionality  as  an 
improvement  on  the  simple,  traditional  invitation 
card.  Some  might  feel  uncomfortable  showing  the 
world  who  made  the  A  list,  and  some  guests  may  not 
like  their  e-mail  address  being  posted  on  the 
invitation. 

An  enterprising  burglar  might  see  an  R.S.V.P.  list  as  a 
handy  checklist  of  people  who  will  be  away  from 
home  on  the  night  of  the  event.  But  most  functions  can 
be  limited  or  turned  off:  The  host  can  limit  the 
maximum  number  of  R.S.V.P.s,  or  turn  off  the  ability 
to  forward  the  invitation.  The  guests  can  take  their 
names  off  the  R.S.V.P.  list,  or  the  host  can  keep  the 
list  confidential.  Despite  these  options,  an  analyst  at 
the  Electronic  Privacy  Information  Center  pointed  out 
that  Internet  users  should  alwavs  be  warv  about 
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guests 


disclosing  personal  information,  especially  when  the 
information  you  are  dealing  with  is  about  your  guests, 
not  yourself. 

VNIf  I  am  an  Evite  client,  I'm  really  distributing 
personal  information  that's  not  mine, ' '  said  analyst 
Andrew  Shen.  ""Evite  should  be  extraordinarily 
sensitive  to  the  information  that's  in  their  hands. ' ' 

Evite.com,  and  most  of  the  other  invitation  sites,  states 
in  its  privacy  policy  that  it  will  not  disseminate 

e-mail  addresses  or  use  them  to  send  e-mail  besides  the 
invitations . 

The  online  party  invitation  was  invented  independently 
by  two  teams  on  opposite  coasts.  In  October  1998,  two 
Stanford  graduates,  Al  Lieb  and  Selena  Tobaccowala, 
launched  an  online  calendar  and  scheduling  tool  that 
would  be  streamlined  into  the  current  Evite.com.  Last 
January,  two  Harvard  MBA  students,  Chris  Grandi 
and  Greg  Richards,  launched  a  test  site  called  iRSVP. 

Grandi  and  Richards  tried  out  iRSVP  with  people  they 
knew.  They  recognized  that  they  had  something  big  on 
their  hands  when  strangers  started  using  their  Web  site 
and  e-  mailing  them  feedback.  After  a  few  weeks,  they 
pulled  the  site  down  to  work  on  their  business  plan. 

They  hired  a  CEO,  Madeline  Schroeder,  a  friend  of 
Richards'  and  a  marketing  wiz  who,  while  working  at 
Sega  in  the  early  1990s,  helped  develop  the  character 
of  Sonic,  the  hedgehog  that  led  Sega's  successful 
charge  against  rival  Nintendo.  The  three 
entrepreneurs  set  up  Mambo.com  in  Menlo  Park. 

Now  the  companies  are  busily  signing  partnerships  to 
integrate  e-  commerce  into  the  event  planning  process. 

Plan  an  Austin  Powers  party  on  Evite.com  and  you'll 
see  a  link  to  New  Line  Cinema's  Austin  Powers  shop. 
Mambo.com  sends  party  planners  to  shop  at 
GreatEntertaining.com,  a  partner  Web  site  that  sells 
theme  party  kits  and  products  such  as  pinatas. 

Read  a  review  of  a  movie  running  in  San  Francisco  at 
CitySearch.com,  a  directory  site  for  local  events,  and 
you  can  click  an  Evite.com  link  to  invite  friends  to  see 
the  movie  at  an  area  theater.  You  choose  from  a  list  of 
available  showings  and  add  your  friends '  e-mail 
addresses,  and  Evite.com  automatically  fills  in  the 
address,  time  and  a  brief  description  of  the  film. 
Mambo.com  has  a  similar  arrangement  with 
Zagat.com,  a  restaurant  guide. 

Eventually,  muses  Evites.com  CEO  Josh  Silverman,  a 
host  will  be  able  to  use  Evite.com  to  arrange  every 
detail  of  an  event,  including  finding  something  to  do, 
buying  tickets  and  making  dinner  reservations .  Some 
of  these  functions  will  appear  on  the  site  within 
months,  he  said. 
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Popularity 

ranking (x) 

million 

million 

million 

million 

NA 

42,487 

NA 


782 

7,328 

9,566 

21,738 


v  v Dinner  reservations  are  a  very  hard  nut  to  crack,  '  ' 
Silverman  said.  The  idea  of  keeping  track  of  thousands 
of  restaurants '  diverse  reservation  systems  boggles  the 
mind.  "But  buying  movie  tickets  is  fairly  easy,  '  '  he 
said. 

The  invitation  sites'  approach  to  e-commerce  is  not  all 
that  different  from  other  sites  that  introduce 
customers  to  merchants,  like  online  shopping  malls, 
said  Matt  Stamski,  a  senior  analyst  at  Gomez  Advisors, 
an  Internet  research  firm  in  Massachusetts . 

'  "Anyone  can  (refer  book  buyers  to)  Amazon  and  get 
5  percent  of  the  total  sale,  but  that's  small  change, ' ' 
Stamski  said.  He  believes  that  whether  the  invitation 
sites  succeed  "depends  on  how  good  a  job  they  do 
striking  deals  with  partners. ' ' 

One  potential  pothole  in  Evite.com1 s  road  to  success  -- 
at  least  internationally  --  is  its  name.  In  English, 
"Evite'  '  evokes  a  pretty  clear  idea  of  what  the  service 
does,  but  in  French  and  other  Romance  languages,  the 
word  "evite'  '  means  "avoid'  '  --  not  a  term  you  want 
to  crop  up  when  planning  a  party.  Silverman,  who 
recently  vacationed  in  Spain,  is  aware  of  the  problem. 

"In  the  Romance- language  countries,  we  will  have  to 
think  of  a  different  master  brand, ' '  he  said. 


CHART: 

INVITATION  STATIONS 
A  growing  number  of  sites  offer  tools  to  let 
you  invite  guests  to  an  event  and  manage  R.S.V.P.s. 


Site 

Evite.com 
Mambo . com 
TimeDance 
Event411.com(y) 
Yahoo  Invites ( z ) 
ThePlunge . com 
Yourlnvi tation . com 


Cost 
free 
free 
free 
free 
free 
free-$45 


Launched 

October  1998 

January  1999 

June  1999 

June  1998 

January  2000 

July  1999 


Capital 
raised 
$38 


18 


NA 


$44.95   September  1998 


(x)  -  Measured  by  Alexa,  a  Web  browsing  application  owned 
by  Amazon.com  that  collects  information  about  what  sites  are  most  popular 
with  its  own  users.  Alexa' s  rankings  do  not  necessarily  reflect  a 
statistical  sampling  of  the  population. 

(y)  -  Includes  Wedding411.com  and  other  event -specific 
sites 
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Amazon  subsidiary,  Alexa  Internet,  uses  software  to 
secretly  collect  personal  data  on  web  users  and 
funnel  it  back  to  Amazon. 


Toxic  Medicine 

Beacon  Mill  VA  Slammed  Over  Risky 

Equipment  (01/13/00) 

By  Alexandra  Holly-Gottlieb 


"I've  never  seen  a  piece  of  software  that  was  so 
talkative  about  what  you're  doing  and  who  you  are," 
says  Richard  M.  Smith,  the  Boston-based  software 
designer  who  filed  the  FTC  complaint.  Smith's 
fundamental  concern,  shared  by  other  privacy 
advocates,  isn't  simply  that  Amazon  is  amassing 
huge  amounts  of  personal  data  (foregoing 
anonymity,  despite  their  online  privacy  statement), 
but  that  there  are  no  government  regulations  in 
place  to  prevent  the  company  and  others  like  it  from 
selling  the  information  to  health  insurers,  credit 
companies,  or  even  potential  employers. 
"Companies  make  all  sorts  of  pledges  about  policy 
today,  but  that  doesn't  mean  they  can't  change  their 
mind  or  get  bought  tomorrow  by  a  company  with  a 
different  policy,"  he  says. 

"These  companies  have  stated  rules,"  agrees  Evan 
Hendricks,  editor  of  the  Washington,  D.C.-based 
newsletter  Privacy  Times,  "but  we  go  through  one 
by  one  and  find  serious  contradictions  with  their 
voluntary  policies."  (Hendricks  points  out  that 
several  companies,  including  Microsoft  and  Real 
Networks,  have  been  "Smiffed"  -  sniffed  out  by 
Smith  —  for  secretly  gathering  information  on 
people.) 

Raising  red  flags  about  nosy  software  companies  is 
crucial.  If  the  Internet,  as  predicted,  becomes  the 
central  marketplace  of  the  2 1st  century,  companies 
will  not  only  be  able  to  track  consumers  in  an 
unprecedented  way,  they'll  be  under  competitive 
pressure  to  use  the  data  to  their  advantage.  If  the 
government  doesn't  step  in  to  regulate  e-commerce, 
privacy  experts  argue,  the  Internet  will  surely 


More- 


More  by  Josh  Feit: 

Feature  Issue  Dale  11/25/99 

Insecurity  Flap 

IN  THE  PARKING  GARAGE  of  the  Capitol 
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(Entire  Issue) 
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become  a  dala-trading  bonanza  for  private  industry. 

In  Europe,  comprehensive  data-protection  laws  give 
citizens  cause  for  legal  action  when  private 
companies  tinker  with  or  trade  personal 
information,  but  other  than  preventing  cable 
companies  and  video  stores  from  revealing  what 
tapes  you  rent,  no  analogous  laws  exist  in  the 
United  States. 


£  Both  Smith's  complaint  and  the  lawsuit  filed 

2  January  6  in  federal  court  by  San  Diego  law  firm 

$  Milberg  Weiss  Bershad  Hynes  &  Lerach  LLP  focus 

™  on  Amazon  subsidiary,  Alexa  Internet.  Amazon 

*  bought  Alexa  last  April  for  $245.5  million  in  stock 

as  part  of  its  "customization"  strategy  to  take 
advantage  of  Alexa's  data-mining  software 
expertise.  The  company's  software  alerts  web 
surfers  to  other  sites  that  may  be  of  interest  to  them. 
The  software,  which  web  users  download  and  attach 
to  their  browsers,  does  this  by  following  the  cyber 
paths  of  millions  of  Internet  shoppers,  analyzing 
where  they  go,  detecting  patterns,  and  reporting 
back  to  individual  consumers  with  browsing  tips. 
Amazon  is  using  Alexa's  updated  version,  zBubbles, 
which  goes  so  far  as  to  make  comparative  shopping 
recommendations. 


The  catch,  according  to  Smith's  FTC  complaint,  is 
that  Alexa's  technology,  without  asking  for  consent, 
simultaneously  sucks  up  personal  data  (names, 
addresses,  phone  numbers,  e-mail  addresses)  and 
monitors  exactly  what  a  person  searched  for  at  a 

a  given  website,  then  relays  thai  info  back  to  Alexa 

n  and  Amazon. 


kl 


o 


3  Smith  knows  what  he's  talking  about,  because  he's 

used  his  own  software  to  spy  on  the  spies.  Cruising 
m  the  web  to  test  out  zBubbles,  for  example,  Smith 
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Amazon.com  zBubbles 

Amazon.com  zBubbles  is  a  free,  easy-to-use  shopping  tool  that  lets  you  share  product  information  with  other  zBubbles 
shoppers.  This  beta  product  includes  Alexa,  a  free  Web  navigation  service  that  provides  information  about  each  product 
and  site  as  you  surf.  The  zBubbles  menu  bar  stays  in  any  corner  of  your  browser  and  travels  with  you  as  you  shop.  Click 
on  any  of  the  three  buttons:  The  Shop  button  gives  you  information  from  fellow  shoppers;  the  Recommend  button  enables 
you  to  tell  other  shoppers  what  you  know  about  a  product;  and  the  Explore  button  activates  Alexa.  zBubbles  requires 
Microsoft  Internet  Explorer  5.x.  This  program  has  not  yet  been  reviewed. 


System  Requirements 

Internet  Explorer  5.01  for  Windows  95/98/NT  and  Windows  95,  98,  or  NT 

Purchase  Information 

Free 

Rating 
NR 

Downloads  to  Date 

17 

Copyright  (c)  1997  ZDNet.  All  rights  reserved.  Reproduction  in  whole  or  in  part  in  any  form  or  medium  without  express  written  permission  of  ZDNet  is  prohibited.  ZDNet  and  the  ZDNet 
logo  are  trademarks  of  Ziff-Davis  Inc. 
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Hacker  Blackmails  Online  Trader  By  Stealing  Card  Data 
Troy  Wolverton 

01/17/2000 

Canberra  Times 

15 

Copyright  The  Federal  Capital  Press  of  Australia  Pty  Limited.  All  rights 

reserved. 

Taking  advantage  of  an  apparent  security  breach  in  Connecticut  on  line 
music  shop  CD  Universe's  database,  a  hacker  posted  links  to  potentially 
thousands  of  customers'  names,  addresses  and  credit-card  numbers  after 
allegedly  failing  to  extort  money  from  it. 

The  hacker,  using  the  name  Maxus",  claimed  to  have  accessed  an 
estimated 

users'  details  cards,  demanding  US$100,000  before  posting  the 
information. 

eUniverse,  which  owns  the  shop,  conceded  that  part  of  its  database  had 
been  stolen,  saying  it  had  noti  fied  the  FBI,  which  had  shut  Max  us ' s 
website. 

It  was  the  latest  of  a  series  of  on  line  privacy-related  incidents  sur 
facing  in  recent  weeks,  reviving  questions  about  what  companies  are 
doing  with  confidential  custom  er  information. 

An  FBI  representative  said  only  that  it  was  investigating  the  black 
mail 
attempt . 

Company  chairman  Brad  Green  span  said,  We  take  great  pains  to 
safeguard  the  privacy  of  our  cus  tomers '  information  and  will  take  all 
necessary  action  to  limit  .  .  . loss  inconvenience  to  customers . " 

A  person  claiming  to  be  Maxus  indicated  to  reporters  by  email  that  he 
had  broken  into  other  systems  that  used  e-commerce  software  ICVerify. 

ICVerify  and  other  payment  verification  programs  owned  by  Cyber  Cash 
ran 

into  a  Y2K-related  prob  lem  that  doubled-billed  consumers  for 
transactions  if  merchants  didn't  install  software  to  fix  it.  However, 
ICVerify  does  not  seem  to  have  a  track  record  of  vulnerabilities, 
according  to  Frank  Prince,  a  Forres  ter  Research  analyst.  He  stressed 
that  there  was  no  evidence  yet  that  Maxus  actually  had  broke  into  CD 
Universe's  systems,  but  could  have  obtained  the  data  from  an  inside 
source . 

Security  experts  said  that  even  if  there  had  been  a  breach  of  CD  Uni 
verse's  systems,  they  doubted  that  the  same  problem  could  be  ex  ploited 
in  such  systems  at  other  Web  shops .  Jupiter  Communica  tions  analyst  Rex 
Baldazo  said  on  line  merchants  used  various  trans  action  systems,  and 
even  those  with  the  same  software  often  used  different  versions. 

Privacy  concerns  have  come  again  to  notice.  Recently  Northwest 
Airlines  said  it  had  had  a  security  breach  in  its  Web  site;  Ama 
zon.com' s  Alexa  Internet  was  sued  by  a  user  over  privacy  concerns;  and 
the  Federal  Trade 
Commission  reached  a  settlement  with  Rever  seAuction.com  over  a  soammina 
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incident  on  eBay. 

eUniverse  notified  its  customers  that  their  credit-card  information 
might  have  been  compromised  and  that  it  was  working  with  the  creditcard 
companies  to  cover  any  fraud  ulent  charges . 

Consumers  are  normally  responsible  for  the  first  $50  charged  with  out 
their  consent . 

Ethan  Preston,  of  the  Electronic  Privacy  Information  Centre,  criti 
cised 

the  company  for  keeping  so  many  records  on  file,  contending  that  no 
company  can  completely  se  cure  its  data,  let  alone  large  amounts  of  it, 
and  should  purge  old  data  regularly. 

When  you  consent  to  a  creditcard  transaction  you  assume  the 
information  will  be  used  for  that  single  he  said.  When  it  is  held  beyond 
that  transaction,  it  can  be  used  in  ways  that  you're  not  comfortable 
with  and 

if  their  security  isn't  strong  enough,  you've  got  a  real  problem."  Elias 
Levy,  of  Security  Focus,  said,  There  is  an  incredible  amount  of  small  to 
medium  e-com  merce  sites  out  there  taking  credit  cards  for  payment 
online  that  did  not  secure  those  credit  cards  cor  rectly  or  enough." 
News. corn's  Stephen  Shankland  contributed  to  this  report.  CNET  News.com 
For  more  on  this  and  other  IT  stories  go  to  www.news.com 
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The  Urge  to  Merge 

Fat  with  cash  from  successful  IPOs,  Net  companies  will  look  to  expand  in  2000. 
By  Jonathan  Rabinovitz,  Greg  Dalton,  and  Miguel  Helft 

IntraLinks  plans  to  go  public  by  March.  But  the  3-year-old  online  financial  services  company 
does  not  plan  use  its  IPO  proceeds  to  support  operations  or  buttress  its  already  healthy  sales. 
It  wants  the  money  to  buy  other  companies.  "We've  completed  one  acquisition  to  date  and 
we're  actively  looking  at  others,"  says  Mark  Adams,  chief  executive  at  New  York-based 
IntraLinks.  "It  could  be  expanding  into  new  markets  or  new  areas,  or  acquiring  a  new 
technology  that's  instrumental  in  improving  a  product  or  service  for  our  customers." 

Not  long  ago  the  urge  to  merge  at  a  firm  like  IntraLinks  would  have  been  seen  as  precocious 
at  best,  and  downright  foolhardy  at  worst.  A  young  company  that  needed  new  technology  or 
new  customers  would  develop  them  itself,  not  go  shopping  for  a  startup. 

That's  sure  to  change  this  year.  The  first  weeks  of  the  year  saw  several  mergers  among 
e-commerce  companies,  capped  off  by  last  week's  megamerger  between  America  Online  and 
Time  Warner  .  Barring  a  major  shift  in  the  financial  markets,  expect  dozens  of  other 
e-commerce  firms  to  follow  the  lead  of  heavyhitters  like  Amazon.com  ,  eBay  and  Ariba,  all  of 
which  boosted  their  business  in  1999  by  aggressively  making  acquisitions. 

The  obvious  motivation  is  money.  A  record  number  of  Internet  companies  -  more  than  200 
-  went  public  last  year  and  now  have  stacks  of  stock  market  cash  to  spend.  "As  spring  follows 
winter,  M&A  activity  follows  IPOs,"  says  Bradford  C.  Koenig,  a  managing  director  at 
Goldman  Sachs  and  codirector  of  its  global  technology  group. 

But  there's  more  to  the  story.  In  the  aftermath  of  the  holiday  season,  online  retail's  stronger 
performers  will  likely  see  their  stocks  rise,  while  those  of  their  weaker  rivals  will  fall.  In  such 
an  environment,  the  big  companies  will  naturally  turn  a  hungry  eye  to  the  smaller  ones  -  and 
the  smaller  ones  will  think  quickly  about  joining  together  to  survive. 

In  the  first  week  of  January,  Proflowers.com  acquired  Flowerfarm.com;  luxury-goods  retailer 
Ashford.com  snapped  up  Jasmin.com,  a  perfume  site;  and  shopping  services  company  Brodia 
merged  with  gift  registry  WishConnect.  On  the  business-to-business  front,  Commerce  One 
acquired  Mergent  Systems.  Concurrent  with  the  merger  trend  is  the  continued  drive  among 
the  largest  Net  companies  to  expand  their  reach  into  new  sectors.  Last  year  eBay  moved  into 
car  sales  and  Amazon  invested  in  everything  from  drugs  to  groceries.  Both  are  expected  to 
make  strides  this  year. 

But,  as  IntraLinks  demonstrates,  the  desire  to  acquire  is  not  an  impulse  felt  only  by 
established  players.  Looking  ahead  to  2000,  investment  bankers  and  e-commerce  experts  are 
buzzing  about  the  number  of  companies  that  have  gone  public  early  and  still  need  to  add  a 
range  of  products  and  services.  Their  choice  is  either  to  develop  them  internally  or  to  buy 
them.  Many  are  opting  for  the  latter. 

These  mergers  "are  virtuous,  they're  offensive  in  nature  and  they're  synergistic,"  Koenig  says. 
"These  are  all  about  strategic  positioning  to  be  able  to  compete  better." 

For  many  companies,  they're  also  about  primping  for  Wall  Street.  By  raising  sales  through 
acquisitions,  firms  reassure  those  investors  who  value  Net  stocks  by  revenue  growth  rather 
than  profits. 

"Wall  Street  expects  growth  and  M&As  are  a  piece  of  that,"  says  Todd  Carter,  director  of 
investment  banking  at  Robertson  Stephens. 

Of  course,  mergers  and  acquisitions  have  not  always  been  considered  a  good  thing.  Critics 
attacked  them  in  the  past  as  little  more  than  financial  engineering  to  inflate  a  company's  value 
and  to  pad  revenue  growth.  But  Net  deals  appear  to  be  passing  muster  among  investors. 

Net  companies  that  announced  large  acquisitions  in  the  past  two  years  have  seen  their  stock 
prices  rise  that  day  an  average  of  nearly  3  percent  more  than  the  Standard  &  Poor's  500 
Index,  according  to  Ken  Sawyer,  managing  director  at  Prudential  Volpe  Technology  Group. 
In  contrast,  back  at  the  start  of  the  1990s  such  news  from  tech  companies  was  greeted  by  an 
average  increase  of  under  1  percent. 

"Historically  an  acquirer's  stock  price  has  declined  on  announcement  of  a  merger  transaction, 
but  that's  not  so  in  the  Internet  space,"  Sawyer  says.  "It's  a  Wild  West  land  grab,  and  M&As  are 
a  key  part  of  the  dynamic." 
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THE  ROARING  2000S 

Investment  bankers  and  analysts  are  forecasting  an  M&A  feeding  frenzy  in  the  year  ahead. 

For  the  Net  in  general  they  expect  continued  buying  sprees  by  Yahoo  and  AOL  ,  which  will 
k  look  to  spread  into  new  sectors  and  expand  globally.  In  online  retail  they  foresee  fewer 

f  players  in  crowded  areas  like  pet  food  and  consumer  electronics,  predicting  that  megastores 

will  move  in  and  make  acquisitions. 

In  the  business-to-business  e-commerce  sector,  big  information-services  providers  like  Oracle 
,  the  Netscape  -  Sun  Alliance  and  IBM  are  also  likely  to  be  chasing  deals,  as  are  the  new 
pure-play  b-to-b  giants,  Ariba  and  Commerce  One. 

This  wave  of  merger  activity  actually  began  as  1999  ended.  A  lot  of  bankers  were  already 
toiling  long  hours  in  late  December.  At  Robertson  Stephens,  an  adviser  on  many  of  1999's 
biggest  Net  M&As,  Carter  says  he  was  working  on  six  deals,  two  of  which  involved  mergers 
between  major  e-commerce  companies.  Robertson  Stephens  is  now  looking  to  add  more 
bankers  to  its  M&A  team,  although  the  current  number  -  over  100  -  is  five  times  what 
Robertson  had  a  few  years  ago. 

The  pace  is  also  accelerating  at  Deutsche  Banc  Alex.  Brown.  On  Sept.  22,  Broadbase 
Software,  which  creates  software  to  help  Web  sites  track  customer  information,  went  public. 
Just  days  later,  Broadbase  executives  approached  their  bankers  at  Deutsche  Banc  about 
possible  acquisition  strategies,  says  Jeff  Liu,  a  Deutsche  Banc  VP  responsible  for 
business-to-business  solutions.  By  early  December,  Broadbase  had  a  $330  million  deal  to  buy 
Rubric,  a  privately  held  maker  of  software  that  helps  businesses  conduct  Internet  marketing 
campaigns. 

"To  compress  all  of  that  into  a  couple  of  months  would  have  been  unheard  of  a  few  years 
ago,"  says  Karl  Will,  a  Deutsche  Banc  managing  director  in  charge  of  technology  M&As.  "It's 
now  taking  one  to  two  weeks  for  a  deal  to  happen  instead  of  one  to  two  months." 

SITES  ON  SALE 

Perhaps  no  area  of  the  Internet  Economy  is  more  ripe  for  M&A  activity  than  online  retailing. 

One  faltering  retailer  is  already  a  prime  candidate  for  acquisition.  Just  before  the  new  year, 
Value  America  warned  that  sales  would  fall  below  expectations  and  said  it  would  cut  its 
workforce  in  half.  The  company  announced  it  would  evaluate  "strategic  refinement,"  a 
euphemism  often  used  by  firms  seeking  a  buyout. 

Some  analysts  think  M&A  activity  in  the  retail  sector  will  be  slowed  by  struggling  retailers 
k  with  few  assets  worth  consolidating.  But  others  say  such  companies  could  be  good  buys  for 

J         land-based  retailers  that  seek  entry  to  e-commerce.  In  1999,  for  instance,  retail  chain  KB 

Toys  teamed  with  BrainPlay.com  to  form  KBkids.com. 

Mergers  in  online  retailing  undoubtedly  will  take  various  forms.  Some  struggling  online 
companies  will  seek  to  reshape  themselves,  others  will  try  to  buy  their  way  into  new  niches. 
Some  categories,  such  as  apparel,  should  be  big  enough  to  sustain  multiple  players  if  each 
appeals  to  a  specific  segment  of  the  market.  On  the  other  hand,  categories  in  which  products 
are  commodities,  such  as  consumer  electronics,  pet  supplies  or  gift  certificates,  are  likely  to  be 
less  forgiving  of  second-tier  companies. 

"There  should  be  consolidation  but  I  don't  believe  all  categories  will  be  represented  by  single 
brands,"  says  Tod  Francis,  a  general  partner  at  Trinity  Ventures  ,  a  VC  firm  in  Menlo  Park, 
Calif.,  that  has  backed  such  online  retailers  as  800.com,  iMotors.com,  Della.com  and  Internet 
Diamonds  (recently  renamed  BlueNile.com). 

Anthony  Noto,  an  e-commerce  analyst  at  Goldman  Sachs,  thinks  most  commerce  categories 
will  end  up  sustaining  three  or  four  major  players.  "In  a  particular  sector  you  may  see  players 
who  are  No.  5  and  6  combining  to  become  a  viable  No.  3,"  he  says. 

Noto  expects  online  retailers  in  narrow  market  sectors  to  reach  into  adjacent  categories  to 
attract  customers  and  revenues.  An  online  grocery  store,  for  instance,  might  consider 
acquiring  a  pet-supply  provider  or  even  a  Web-based  pharmacy. 

MyPoints  and  Netcentives,  two  companies  that  offer  one  piece  of  Internet  marketing,  will 
likely  be  targeted  by  larger  online  advertising  and  marketing  firms  that  want  to  broaden  their 
platforms,  expects  one  venture  capitalist,  who  spoke  on  condition  of  anonymity. 

Analysts  do  not  anticipate  that  the  heavyweights  will  rest  on  their  laurels  in  the  year  to  come. 
Amazon  and  eBay  are  expected  to  invest  in  companies  to  spread  their  franchise  into  new 
categories,  technologies  and  regions. 

That  was  the  strategy  behind  a  number  of  Amazon's  big  buys  last  year,  most  notably  a  string 

of  three  deals  involving  S645  million  in  stock  that  was  announced  in  April.  Primarily  a  seller 

of  books  and  music  at  the  time,  Amazon  gobbled  up  Exchange.com  to  expand  into  rare 

books;  it  also  acquired  Alexa  Internet  and  Accept.com  to  get  tools  for  improving  navigation 
^  on  its  site.  The  company  also  made  sizable  investments  in  online  retailers  that  complement  its 
\         core  business,  including  Della.com,  Drugstore.com  and  HomeGrocer.com. 

EBay,  meanwhile,  has  bought  its  way  into  businesses  that  fit  its  emphasis  on  online  auctions: 
international  operations  in  Germany,  Butterfield  &  Butterfield  for  high-end  auctions  and 
Kruse  International  for  auto  auctions.  Recently  eBay  absorbed  Blackthorne  Software,  a 
company  that  makes  it  easier  for  active  sellers  to  manage  their  auctions.  Some  analysts  have 
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suggested  that  eBay  might  now  move  into  the  business-to-business  space;  indeed  it  already 
has  made  an  equity  investment  in  Tradeout.com,  a  site  for  surplus  corporate  materials. 

^         The  business-to-business  side  of  e-commerce  is  expected  to  see  heavy  M&A  activity  in  the 
m        future,  though  the  sector  is  generally  thought  to  be  a  year  or  so  behind  online  retailing  in  that 
W        department.  Only  a  few  b-to-b  companies  have  made  their  public  debut  but  dozens  more  are 

expected  to  list  their  shares  in  the  coming  months  -  and  then  pursue  the  same  M&A  strategy 

followed  by  firms  that  went  public  in  the  past  couple  of  years. 

Want  a  glimpse  of  what's  to  come?  Consider  the  skyrocketing  valuation  of  Tradex 
Technologies,  a  Houston-based  company  that  sells  infrastructure  software  for  set-  ting  up 
Internet  exchanges.  Tradex,  which  Ariba  plans  to  acquire,  saw  its  value  jump  from  $100 
million  earlier  in  the  year  to  nearly  $2  billion  in  December,  when  the  deal  was  announced. 

"Some  [investors]  think  they  left  some  money  on  the  table,  because  [Tradex]  could  have  been 
a  $4  billion  to  $5  billion  IPO,"  says  Daniel  Aegerter,  Tradex's  chief  executive.  "We  were  ready, 
locked  and  loaded  to  take  this  out." 

So  why  didn't  he?  Aegerter  says  that  route  would  have  brought  the  company  money,  but  also 
would  have  isolated  it  from  the  large  networks  that  are  emerging  in  the  b-to-b  marketplace. 
Aegerter  calls  Ariba  one  of  the  "gorillas"  in  that  market,  and  he  thinks  it's  better  to  be  on 
Ariba's  good  side,  even  if  that  means  a  little  less  cash. 

Tradex  wasn't  the  only  acquisition  by  Ariba,  which  went  public  in  1999  and  quickly  reached 
a  stock  market  valuation  greater  than  $10  billion.  In  November  it  scooped  up  Trading 
Dynamics,  an  auction-based  marketplace  for  suppliers,  for  more  than  $400  million  in  stock. 
Meanwhile,  Ariba  rival  Commerce  One  swapped  cash  and  shares  worth  about  $230  million  to 
acquire  CommerceBid.com. 

Now  other  b-to-b  procurement  companies  are  looking  to  take  similar  steps.  Firms  like 
Intelisys  Electronic  Commerce,  a  second-tier  provider  of  infrastructure  for  online 
marketplaces,  know  that  if  they  want  to  compete  with  Ariba  and  Commerce  One  they'll  need 
auction  services.  Intelisys  board  member  Ray  Fattell  says  his  company  "absolutely"  will  have 
auction  capability  and  will  consider  making  acquisitions  to  meet  that  need. 

A  possible  target  for  Intelisys  -  and  for  other  companies  seeking  to  develop  b-to-b  exhanges 
-  is  Moai  Technologies,  which  makes  auction  software  for  just  such  exchanges.  (Ann 
Perlman,  Moai's  chief  executive,  said  in  an  interview  in  December  that  the  company  was 
raising  another  round  of  venture  funding  and  was  not  involved  in  any  merger  talks.) 

^         The  motor  behind  all  this  merger  movement  is  the  trend  toward  b-to-b  trading  exchanges. 
m        While  there  are  about  200  such  marketplaces  in  various  niches  -  from  office  supplies  to  truck 
W        parts  -  only  a  few  are  gaining  critical  mass. 

Kenneth  Fox,  managing  director  of  Internet  Capital  Group,  a  holding  company  with  stakes  in 
28  online  marketplaces,  predicts  leading  b-to-b  companies  will  consolidate  their  hold  on  their 
marketplace  niches,  then  seek  to  expand.  A  plastics  company,  for  example,  might  look  to 
move  into  chemicals.  "There  are  going  to  be  consolidation  opportunities  across  process 
industries,"  Fox  says. 

"These  [online  marketplaces]  tend  to  be  winner-take-all,"  he  adds.  "You're  going  to  see  No.  1 
buy  No.  2  and  3." 
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Questions  about  the  data  collection  practices  of  a  subsidiary  of 
Amazon,  the  Internet's  largest  retailer,  have  erupted  in  a 
confrontation  between  a  respected  computer  security  expert  and  a 
renowned  Internet  pioneer. 

The  security  expert  is  Richard  M.  Smith,  who  has  recently 
dedicated  much  of  his  professional  life  to  uncovering  privacy  issues 
arising  from  software  flaws  and  e-commerce  schemes. 

The  Internet  pioneer  is  Brewster  Kahle,  founder  of  Alexa  Internet, 
the  Amazon  subsidiary  in  San  Francisco  that  developed  the  data- 
collection  software  in  question.  The  software  is  being  tested  for  use 
with  Amazon's  forthcoming  zBubbles  comparison- shopping  service. 

The  software,  now  available  only  in  a  trial  version  and  only  on 
the  Alexa  Web  site,  monitors  which  sites  a  consumer  visits,  looks  for 
patterns  shared  by  many  individual  shoppers  and  then  aggregates 
information  about  the  collective  navigation  of  Web  users.  It  is 
designed  to  continually  learn  about  shopping  behavior  and  improve  the 
quality  of  information  it  makes  available  to  consumers. 

Smith  last  week  filed  a  formal  complaint  with  the  Federal  Trade 
Commission  in  which  he  said  his  examination  of  the  behavior  of  the 
Alexa  software  revealed  it  was  capable  of  gathering  far  more  personal 
data  about  consumers  than  Amazon  tells  customers  it  is  collecting. 

Smith,  who  earlier  this  year  drew  widespread  attention  to  the 
privacy  practices  of  a  number  of  large  Internet  companies  including 
Microsoft  Corp.  and  RealNetworks,  said  he  discovered  that  both  Alexa 
programs  occasionally  pass  on  personal  information  including  names, 
postal  addresses,  phone  numbers  and  e-mail  addresses.  They  also 
gather  information  about  the  things  people  are  searching  for  and  pass 
all  this  data  to  network  server  computers  operated  by  Alexa. 

"I  believe  that  the  transmission  of  this  personal  data  is  a  breach 
of  the  zBubbles  License  and  Usage  Agreement, "  Smith  asserted  in  a 
letter  to  Jeff  Bezos,  Amazon's  chairman.  "In  addition,  the  software 
may  also  violate  a  number  of  federal  laws  including  the  Computer 
Fraud  and  Abuse  Act  and  the  Electronic  Communications  Privacy  Act." 

In  a  telephone  interview  with  the  Times,  Kahle  defended  the  Alexa 
technology,  saying  that  while  some  information  was  unavoidably 
collected  from  Web  surfers,  the  important  point  was  that  the 
information  was  not  stored  permanently  and  was  not  used  to  connect 
Web  behavior  to  a  person's  identity. 

"The  standard  that  we're  attempting  to  uphold,"  Kahle  said,  "is 
that  if  a  crovernment  aaencv  were  to  come  and  subpoena  us  and  ask. 
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"Where  was  an  individual  going  on  the  Web  before  he  bombed  the 
federal  building?'  we'd  be  able  to  say,  vWe  don't  know. '  " 

At  the  center  of  the  confrontation  is  an  Internet  privacy  issue 
that  is  currently  being  bitterly  disputed  in  Washington:  whether  the 
good  intentions  of  a  corporation  are  sufficient  to  protect  individual 
privacy . 

"What  is  important  about  what  Richard's  identified  here,"  said 
James  X.  Dempsey,  staff  counsel  for  the  Center  for  Democracy  and 
Technology,  a  Washington  lobbying  group,  is  how  easily  Web  sites  can 
collect  pieces  of  data  that  "come  to  include  information  that  most 
people  would  consider  personal." 

The  confrontation  is  extraordinary  because  it  positions  two  well 
regarded  technologists  on  opposite  sides  of  a  complex  debate.  Kahle, 
who  had  previously  designed  information  retrieval  software  at 
Thinking  Machines  Inc . ,  and  WAIS  Inc . ,  two  companies  he  helped  found, 
started  Alexa  Internet  in  1996.  Since  the  company  was  acquired  by 
Amazon  earlier  this  year,  Alexa  has  focused  on  developing  the  retail 
giant's  zBubbles  service. 

The  Alexa  technology  attempts  to  offer  online  shoppers  improved 
guidance  on  how  to  retrieve  information  about  goods  and  services.  It 
does  this  by  studying  the  paths  followed  by  many  Web  surfers  so  that 
individual  consumers  can  benefit  from  an  aggregation  of  shopping 
experiences . 

At  the  same  time,  the  company  states  on  its  Web  site  that  it  does 
not  link  individual  identity  to  Web  activity.  Smith  asserts  that  this 
discrepancy  intentionally  misleads  customers . 

Kahle  said  the  behavior  of  his  software  reflected  his  own  struggle 
for  more  than  a  decade  over  the  potential  privacy  issues  raised  by 
information  retrieval  technology. 

During  the  1980s  while  at  Thinking  Machines,  a  Cambridge,  Mass., 
maker  of  supercomputers,  Kahle  said,  he  was  already  developing 
information  retrieval  technology  used  commercially  by  Dow  Jones . 

At  that  time,  he  said,  the  challenge  was  making  sure  that 
employees  did  not  misappropriate  information  about  what  Dow  Jones 
customers  were  searching  for.  In  1992,  Kahle  wrote  a  paper  titled 
"Ethics  of  Digital  Librarianship, "  which  dealt  with  the 
responsibility  of  librarians  to  keep  personal  information  private  in 
the  computer  era. 

Foreshadowing  the  very  criticism  he  is  now  facing,  Kahle  wrote: 

"At  this  point  this  is  not  a  problem  since  few  servers  are  of  a 
personal  nature  yet,  but  as  the  system  grows  to  include 
entertainment,  employment,  health  and  other  servers,  it  is  easy  to 
imagine  the  types  of  information  that  will  be  accessible  through 
operating  such  a  server." 

Smith  argues  that  despite  policy  statements  published  on  both  the 
Amazon  and  Alexa  Web  sites,  most  users  are  not  fully  aware  of  the 
nature  of  the  information  that  is  being  sent  to  the  Alexa  Web 
servers . 

That  is  because  Web  sites  are  increasinalv  becomina  massive 
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databases  that  gather  personal  data  in  order  to  personalize  content 
or  advertising  to  individual  consumers. 

A  byproduct  of  that  trend  is  that  universal  resource  locators,  or 
URLs,  as  the  addresses  of  Web  pages  are  known,  increasingly  contain 
personal  information  that  sites  have  gathered.  All  of  this 
information  gets  collected,  intentionally  or  not,  by  simply 
monitoring  the  URLs  of  pages  consumers  visit. 

"One  of  the  problems  is  that  all  of  this  stuff  is  very  slippery, " 
Smith  said.  "I  respect  Brewster's  ethics,  but  what  happens  if  he 
leaves?  There  are  no  legal  protections  on  the  Web. " 
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31.13  TZ;  Tech  2000/  Renay  San  Miguel.  A  hacker  went  onto  a  Connecticut  based  internet  site  and 
stole  300,000  credit  card  files.  V;  CD  Universe  Web  Site.  The  FBI  is  looking  into  a  web  site  built  by  a 
hacker  that  features  names  and  credit  card  numbers  of  CD  Universe  customers.  V;  Bizrate  Web  Site. 
CD  Universe  said  that  somebody  stole  some  of  their  database  and  was  trying  to  get  money  from  them  to 
keep  him  from  putting  the  names  on  the  internet.  V;  IC  Verify  Software.  V;  Northwest  Airlines.   Last 
week  someone  broke  into  Northwest  Airlines'  web  site.  V;  Alexa  Web  Site.  A  customer  of  Alexa,  a 
division  of  America  Online,  is  suing  the  company  for  allegedly  giving  out  information  about  him.  V;  Real 
Networks  Web  Site.  Bank  Boston  Robert  Steven's  Dan  Niles  came  out  with  positive  comments 
yesterday  about  Intel.  Today  Credit  Suisse  First  Boston  has  some  positive  things  to  say.  GR;  CSFG  on 
Intel/  Charlie  Glavin.  35.25 
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Amazon,  others  eye  stake  in  Kozmo 
By  Bloomberg  News 
Special  to  CNET  News.com 
January  11,  2000,  6:30  a.m.  PT 

NEW  YORK- -Investors  led  by  Amazon.com,  the  giant  Internet  retailer,  are 
ploughing  $100  million  into  Kozmo.com,  an  online  delivery  company  that  sends 
items  bought  on  the  Web  to  peoples'  doors  within  an  hour,  according  to 
reports . 

Kozmo  is  raising  $60  million  from  Amazon,  which  will  take  about  a  23  percent 
stake  in  the  company,  and  nearly  $30  million  from  an  affiliate  of  Softbank, 
though  the  Wall  Street  Journal,  which  reported  the  news  citing  people 
familiar  with  the  situation,  couldn't  identify  other  investors. 

Kozmo  is  planning  to  expand  its  services  to  21  new  markets  this  year,  and  is 
valued  at  $300  million  after  the  investment,  the  Journal  said. 

Amazon.com  and  its  Alexa  Internet  unit  are  being  sued  by  a  user  who  alleges 
that  Alexa  secretly  intercepted  personal  information  and  sent  it  to 
Amazon.com. 

CdDvriaht  2000.  Bloombera  L.P.  All  Riahts  Reserved. 
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Data-gathering  program  ignites 
technologists'  battle  over  privacy 


By  John  Markoff,  xkwyobktimes  news  service 

Suestions  about  the  data  collection  practices  of  a 
subsidiary  of  Amazon,  the  Internet's  largest  retail- 
er, have  erupted  in  a  confrontation  between  a  re- 
ed computer  security  expert  and  a  renowned  Inter- 
net pioneer. 

The  security  expert  is  Richard  M.  Smith,  who  has  re- 
cently dedicated  much  of  his  professional  life  to  uncov- 
ering privacy  issues  arising  from  software  flaws  and  e- 
commerce  schemes. 

The  Internet  pioneer  is  Brewster  Kahle,  founder  of 
Alexa  Internet,  the  San  Francisco-based  Amazon  sub- 
"sidiary  that  developed  the  data-collection  software  in 
question.  The  software  is  being  tested  for  use  with  Ama- 
zon's forthcoming  zBubbles  comparison-shopping  ser- 
vice. 

The  software,  which  is  currently  available  only  in  a  tri- 
al version  and  only  on  the  Alexa  Web  site,  monitors 
which  sites  a  consumer  visits,  looks  for  patterns  shared 
by  many  individual  shoppers  and  then  aggregates  infor- 
mation about  the  collective  navigation  of  Web  users. 

It  is  designed  to  continually  learn  about  shopping  be- 
havior arid  improve  the  quality  of  information  it  makes 
available  to  consumers. 

Last  week  Smith  filed  a  formal  complaint  with  the 
Federal  Trade  Commission  in  which  he  said  his  exami- 
nation of  the  behavior  of  the  Alexa  software  had  re- 
vealed that  it  was  capable  of  gathering  far  more  person- 
al data  about  consumers  than  Amazon  tells  customers  it 
is  collecting, 

Smith,  who  earlier  this  year  drew  widespread  atten- 


tion to  the  privacy  practices  of  a  number  of  large  Inter- 
net companies  including  Microsoft  Corp.  and  RealNe- 
tworks, said  he  discovered  that  both  Alexa  programs 
occasionally  pass  on  personaf  information  including 
names,  postal  addresses,  phone  numbers  and  e-mail  ad- 
dresses. 

,  They  also  gather  information  about  the  things  people 
are  searching  for  and  pass  all  this  data  to  network  serv- 
er computers  operated  by  Alexa. 

"I  believe  that  the  transmission  of  this  personal  data 
is  a  breach  of  the  zBubbles  License  and  Usage  Agree- 
ment," Smith  asserted  in  a  letter  to  Jeff  Bezos,  Amazon's 
chairman. 

"In  addition,  the  software  may  also  violate  a  number 
of  federal  laws  including  the  Computer  Fraud  and 
Abuse  Act  and  the  Electronic  Communications  Privacy 
Act." 

In  a  telephone  interview,  Kahle  defended  the  Alexa 
technology,  saying  that  while  some  information  was  un- 
avoidably collected  from  Web  surfers,  the  important 
point  was  that  the  information  was  not  stored  perma-  ■ 
nently  and  was  not  used  to  connect  Web  behavior  to  a 
person's  identity. 

"The  standard  that  we're  attempting  to  uphold," 
Kahle  said,  "is  that  if  a  government  agency  were  to 
come  and  subpoena  us  and  ask,  "Where  was  an  individu- 
al going  on  the  Web  before  he  bombed  the  federal 
building?"  we'd  be  able  to  say,  *We  don't  know.' " 
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At  the  center  of  the  confrontation 
is  an  Internet  privacy  issue  that  is 
currently  being  bitterly  disputed  in 
Washington:  whether  the  good  in- 
tentions of  a  corporation  are  suffi- 
cient to  protect  individual  privacy. 

"What  is  important  about  what 
Richard's  identified  here,"  said 
James  X.  Dempsey,  staff  counsel  for 
the  Center  for  Democracy  and 
Technology,  a  Washington  based 
lobbying  group,  is  how  easily  Web 
sites  can  collect  pieces  of  data  that 
"come  to  include  information  that 
most  people  would  consider  person- 
al." 

The  confrontation  is  extraordi- 
nary because  it  positions  two  well- 
regarded  technologists  on  opposite 
sides  of  a  complex  debate. 

Kahle,  who  had  previously  de- 
signed information  retrieval  soft- 
ware at  Thinking  Machines  Inc.  and 
WAIS  Inc.,  two  companies  he 
helped  found,  started  Alexa  Internet 
in  1996.  Since  the  company  was  ac- 
quired by  Amazon  earlier  this  year, 
Alexa  has  focused  on  developing  the 
retail  giant's  zBubbles  service. 

The  Alexa  technology  attempts  to 
offer  online  shoppers  improved 
guidance  on  how  to  retrieve  infor- 
mation about  goods  and  services. 

It  does  this  by  studying  the  paths 
followed  by  many  Web  surfers  so 
that  individual  consumers  can  bene- 
fit from  an  aggregation  of  shopping 
experiences. 

At  the  same  time,  the  company 
states  on  its  Web  site  that  it  does  not 
link  individual  identity  to  Web  activi- 
ty. Smith  asserts  that  this  discrepan- 
cy intentionally  misleads  customers. 

Retrieval  technology 

Kahle  said  the  behavior  of  his 
software  reflected  his  own  struggle 
for  more  than  a  decade  over  the  po- 
tential privacy  issues  raised  by  infor- 
mation retrieval  technology.         tut 


During  the  1980s  while  at  Think- 
ing Machines,  a  Cambridge,  Mass.- 
based  maker  of  supercomputers, 
Kahle  said,  he  was  already  develop- 
ing information  retrieval  technology 
used  commercially  by  Dow  Jones. 

At  that  time,  he  said,  the  chal- 
lenge was  making  sure  that  employ- 
ees did  not  misappropriate  informa- 
tion about  what  Dow  Jones 
customers  were  searching  for. 

In  1992,  Kahle  wrote  a  paper  titled 
"Ethics  of  Digital  Iibrarianship," 
which  dealt  with  the  responsibility 
of  librarians  to  keep  personal  infor- 
mation private  in  the  computer  era. 

Foreshadowing  the  very  criticism 
he  is  now  facing,  Kahle  wrote,  "At 
this  point  this  is  not  a  problem  since 
few  servers  are  of  a  personal  nature 
yet,  but  as  the  system  grows  to  in- 
clude entertainment,  employment, 
health  and  other  servers,  it  is  easy  to 
imagine  the  types  of  information 
that  will  be  accessible  through  oper- 


Smith  argues  that  despite  policy 
statements  published  on  both  the 
Amazon  and  Alexa  Web  sites,  most 
users  are  not  fully  aware  of  the  na- 
ture of  the  information  that  is  being 
sent  to  the  Alexa  Web  servers. 

That  is  because  Web  sites  are  in- 
creasingly becoming  massive  data- 
bases that  gather  personal  data  in 
order  to  personalize  content  or  ad- 
vertising to  individual  consumers. 

A  byproduct  of  that  trend  is  that 
universal  resource  locators,  or 
URLs,  as  the  addresses  of  Web 
pages  are  known,  increasingly  con- 
tain personal  information  that  sites 
have  gathered.  All  of  this  informa- 
tion gets  collected,  intentionally  or 
not,  by  simply  monitoring  the  URLs 
of  pages  consumers  visit 

"One  of  the  problems  is  that  all  of 
this  stuff  is  very  slippery,"  Smith 
said.  "I  respect  Brewster's  ethics, 
but  what  happens  if  he  leaves? 
There  are  no  legal  protections  on 
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Intruder  exploits  security  breach  on  CD  Universe 

Troy  Wolverton 

CNET  News.com 

1/10/2000  10:15  AM 

Taking  advantage  of  an  apparent  security  breach  in  CD  Universe's 
database,  a  hacker  posted  links  to  potentially  thousands  of  customer  names, 
addresses  and  credit  card  numbers  after  purportedly  failing  to  extort  money 
from  the  online  music  store. 

The  hacker,  who  goes  by  the  name  "Maxus, "  claimed  to  have  tapped  into  an 
estimated  350,000  user  names  and  credit  cards  from  CD  Universe.  Before 
posting  access  to  the  information  through  a  Web  site  identified  only  by  its 
IP  address,  he  demanded  $100,000  from  the  Connecticut-based  Web  store. 

In  a  statement  issued  today,  eUniverse,  which  owns  CD  Universe,  acknowledged 
that  a  portion  of  its  customer  data  had  been  stolen.  The  company  said  it  had 
notified  the  FBI  after  the  hacker  attempted  blackmail .  The  FBI  shut  Maxus ' 
Web  site  Saturday  after  it  was  discovered,  the  company  said. 

The  hacking  is  the  latest  in  a  string  of  online  privacy-related  incidents 
^  that  have  come  to  light  in  just  the  last  few  weeks.  These  cases,  along  with 
B  concerns  that  were  heightened  by  the  holiday  shopping  season,  have  revived 

questions  about  what  companies  are  doing  with  confidential  customer 

information. 

An  FBI  representative  in  Connecticut  said  the  bureau  was  investigating  the 
potential  extortion  of  CD  Universe  but  declined  to  comment  further. 

"We  take  great  pains  to  safeguard  the  privacy  of  our  customers '  information 
and  will  take  all  necessary  action  to  limit  any  loss  or  inconvenience  to 
customers,  which  may  occur  as  a  result  of  this  unusual  occurrence,"  company 
chairman  Brad  Greenspan  said. 

In  an  email  message  to  reporters,  a  person  claiming  to  be  Maxus  indicated 
that  he  had  previously  broken  into  systems  using  e-commerce  transaction 
software  ICVerify.  A  representative  for  eUniverse  could  not  confirm  whether 
the  company  does  indeed  use  ICVerify  but  believed  that  it  did. 

ICVerify  and  other  payment  verification  programs  owned  by  CyberCash  ran  into 
a  Y2K-related  problem  that  doubled-billed  consumers  for  transactions  if 
merchants  didn't  install  software  to  fix  it.  However,  ICVerify  does  not  seem 
to  have  a  track  record  of  vulnerabilities,  according  to  Frank  Prince,  an 
analyst  who  covers  security  technology  for  Forrester  Research. 

Prince  stressed  that  there  is  no  evidence  yet  that  Maxus  actually  broke  into 
CD  Universe's  systems.  The  hacker  could  have  obtained  the  data  from  an 
inside  source  who  copied  the  database  onto  a  floppy  disk  and  then  sent  it  to 
the  hacker. 

W    "Could  this  be  a  new  exploit  of  some  kind?  It  could  be, "  Prince  said.  "Do  we 
know  that  to  be  true?  No  we  don ' t . " 
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Security  experts  said  that  even  if  there  was  a  breach  in  CD  Universe's 
payment  systems,  they  doubt  that  the  same  problem  could  be  exploited  within 
like  systems  at  other  Web  stores.  Online  merchants  use  a  variety  of 
transaction  software,  and  even  those  that  run  the  same  system  software  often 
use  different  versions  of  it,  said  Rex  Baldazo,  an  analyst  with  Jupiter 
Communications . 

The  security  breach  at  CD  Universe  comes  as  privacy  concerns  have  again 
jumped  to  the  forefront  of  Net  users'  concerns.  Last  week,  Northwest 
Airlines  said  that  it  had  experienced  a  security  breach  in  its  Web  site, 
Amazon.com' s  Alexa  Internet  was  sued  by  a  user  over  privacy  concerns,  and 
the  Federal  Trade  Commission  reached  a  settlement  with  ReverseAuction.com 
concerning  a  spamming  incident  on  eBay. 

Copyright  1999  CNet.com.  All  rights  reserved.  This  material  may  not  be 
published,  broadcast,  rewritten  or  redistributed. 
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FBI  probes  extortion  case  at  CD  store 

By  Troy  Wolverton 

Staff  Writer,  CNET  News.com 

January  10,  2000,  12:45  p.m.  PT 

URL:  http://news.cnet.com/category/0-1007-200-1519088.html 

update  Taking  advantage  of  an  apparent  security  breach  in  CD  Universe ' s 
database,  a  hacker  posted  links  to  potentially  thousands  of  customer  names, 
addresses  and  credit  card  numbers  after  purportedly  failing  to  extort  money 
from  the  online  music  store. 

The  hacker,  who  goes  by  the  name  "Maxus, "  claimed  to  have  tapped  into  an 
estimated  350,000  user  names  and  credit  cards  from  CD  Universe.  Before 
posting  access  to  the  information  through  a  Web  site  identified  only  by  its 
IP  address,  he  demanded  $100,000  from  the  Connecticut-based  Web  store. 

In  a  statement  issued  today,  eUniverse,  which  owns  CD  Universe,  acknowledged 
that  a  portion  of  its  customer  data  had  been  stolen.  The  company  said  it  had 
notified  the  FBI  after  the  hacker  attempted  blackmail .  The  FBI  shut  Maxus ' 
Web  site  Saturday  after  it  was  discovered,  the  company  said. 

The  hacking  is  the  latest  in  a  string  of  online  privacy-related  incidents 
that  have  come  to  light  in  just  the  last  few  weeks.  These  cases,  along  with 
concerns  that  were  heightened  by  the  holiday  shopping  season,  have  revived 
questions  about  what  companies  are  doing  with  confidential  customer 
information. 

An  FBI  representative  in  Connecticut  said  the  bureau  was  investigating  the 
potential  extortion  of  CD  Universe  but  declined  to  comment  further. 

"We  take  great  pains  to  safeguard  the  privacy  of  our  customers '  information 
and  will  take  all  necessary  action  to  limit  any  loss  or  inconvenience  to 
customers,  which  may  occur  as  a  result  of  this  unusual  occurrence, "  company 
chairman  Brad  Greenspan  said. 

In  an  email  message  to  reporters,  a  person  claiming  to  be  Maxus  indicated 
that  he  had  previously  broken  into  systems  using  e-commerce  transaction 
software  ICVerify.  A  representative  for  eUniverse  could  not  confirm  whether 
the  company  does  indeed  use  ICVerify  but  believed  that  it  did. 

ICVerify  and  other  payment  verification  programs  owned  by  CyberCash  ran  into 
a  Y2K-related  problem  that  doubled-billed  consumers  for  transactions  if 
merchants  didn't  install  software  to  fix  it.  However,  ICVerify  does  not  seem 
to  have  a  track  record  of  vulnerabilities,  according  to  Frank  Prince,  an 
analyst  who  covers  security  technology  for  Forrester  Research. 

Prince  stressed  that  there  is  no  evidence  yet  that  Maxus  actually  broke  into 
CD  Universe ' s  systems .  The  hacker  could  have  obtained  the  data  from  an 
inside  source  who  copied  the  database  onto  a  floppy  disk  and  then  sent  it  to 
the  hacker. 

"Could  this  be  a  new  exploit  of  some  kind?  It  could  be, "  Prince  said.  "Do  we 
know  that  to  be  true?  No  we  don ' t . " 

Securitv  exoerts  said  that  even  if  there  was  a  breach  in  CD  Universe's 

Page  1  of  2 


Wed,  Feb  23,  2000   11:53  AM 


payment  systems,  they  doubt  that  the  same  problem  could  be  exploited  within 
like  systems  at  other  Web  stores.  Online  merchants  use  a  variety  of 
transaction  software,  and  even  those  that  run  the  same  system  software  often 
use  different  versions  of  it,  said  Rex  Baldazo,  an  analyst  with  Jupiter 
Communications . 

The  security  breach  at  CD  Universe  comes  as  privacy  concerns  have  again 
jumped  to  the  forefront  of  Net  users'  concerns.  Last  week,  Northwest 
Airlines  said  that  it  had  experienced  a  security  breach  in  its  Web  site, 
Amazon.com' s  Alexa  Internet  was  sued  by  a  user  over  privacy  concerns,  and 
the  Federal  Trade  Commission  reached  a  settlement  with  ReverseAuction.com 
concerning  a  spamming  incident  on  eBay. 

For  its  part,  eUniverse  is  notifying  its  customers  that  their  credit  card 
information  might  have  been  compromised,  said  Brett  Brewer,  the  company's 
vice  president  of  e-commerce.  eUniverse  also  is  working  with  the  credit  card 
companies  to  cover  any  possible  fraudulent  charges.  Consumers  are  normally 
responsible  for  the  first  $50  of  charges  made  without  their  consent. 

But  Ethan  Preston,  a  law  clerk  with  the  Electronic  Privacy  Information 
Center,  criticized  the  company  for  keeping  so  many  records  on  file.  Preston 
contends  that  no  company  can  completely  secure  its  data,  let  alone  large 
amounts  of  stored  files.  Companies  should  regularly  purge  old  data  to 
protect  users'  privacy,  Preston  said. 

"When  you  consent  to  a  credit  card  transaction,  you  assume  the  information 
will  be  used  for  that  single  transaction, "  Preston  said.  "When  it  is  held 
beyond  that  transaction,  it  can  be  used  in  ways  that  you're  not  comfortable 
with — and  if  their  security  isn't  strong  enough,  you've  got  a  real  problem." 

"Credit  card  theft  is  probably  more  common  than  we  think, "  said  Elias  Levy 
of  security  firm  Security  Focus.  "There  is  an  incredible  amount  of  small  to 
medium  e-commerce  sites  out  there  taking  credit  cards  for  payment  online 
that  did  not  secure  those  credit  cards  correctly  or  enough. " 

The  troubling  thing  about  stealing  credit  cards  over  computer  networks  is 
that  so  many  can  be  obtained  in  one  fell  swoop,  Levy  said.  "When  you  get 
broken  into,  you  lose  possibly  hundreds  or  thousands  of  credit  cards.  It's 
not  like  going  to  the  Dumpster  next  to  the  restaurant  and  seeing  a  couple 
carbon  copy  receipts, "  he  said. 

News. corn's  Stephen  Shankland  contributed  to  this  report. 
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It's  an  M&A  World 

Investment  hankers  and  analysts  say  the  AOL- Time  Warner  is  only  a  beginning;  Ihey  are  forecasting  a  merger  and 
acquisition  feeding  frenzy  among  online  companies  this  year. 
By  Jonathan  Rabinovitz,  Greg  Dalton  and  Miguel  Helft 

Only  a  few  years  ago  an  Internet  pure-play  like  America  Online  would  have  touted  its 
absence  of  brick-and-mortar  operations  -  magazines,  television  stations  and  cable  operations 

I    -  as  a  sign  of  its  superior  value.  In  those  days,  a  move  to  merge  with  a  traditional  "real-world" 

y    company  would  have  meant  risking  the  company's  high  stock  value. 

m    But  this  morning,  when  AOL  and  Time  Warner  announced  their  "merger  of  equals,"  investors' 
I    immediate  reaction  was  enthusiastic.  While  AOL  closed  at  the  end  of  trading  down  a  modest 
||    $2.75  at  $71,  its  price  had  initially  jumped  $6.25  to  $80. 

8  "This  marriage  is  going  to  accelerate  conversations  about  mergers  and  acquisitions  across  the 

|f  Net,"  says  Todd  Carter,  director  of  investment  banking  at  Robertson  Stephens,  a  firm  not 

p  involved  in  the  deal.  "There  are  going  to  be  board  conversations  throughout  America  and  the 

If  developed  world  saying,  'My  god!  Look  at  what  happened,  what  are  we  going  to  do?" 

%    Investment  bankers  and  analysts  are  forecasting  an  M&A  feeding  frenzy  in  the  year  ahead.  In 
the  wake  of  AOL's  move,  there's  now  pressure  on  Yahoo  ,  AltaVista  and  ExciteAtHome  to 
make  similar  moves.  And  beyond  the  media  and  portal  spaces,  the  urge  to  merge  has  already 
started  to  spread. 

In  online  retail,  analysts  foresee  fewer  players  in  crowded  areas  like  pet  food  and  consumer 
electronics,  predicting  that  megastores  will  move  in  and  make  acquisitions.  In  the  first  week  of 
January,  Proflowers.com  acquired  Flowerfarm.com;  luxury-goods  retailer  Ashford.com 
snapped  up  Jasmin.com,  a  perfume  site;  and  shopping-services  company  Brodia  merged  with 
gift  registry  WishConnect. 

Concurrent  with  the  merger  trend  is  a  continued  drive  among  the  largest  Net  companies  to 
expand  their  reach  into  new  sectors.  Last  year  eBay  moved  into  car  sales  and  Amazon.com 
invested  in  everything  from  drugs  to  groceries.  Both  are  expected  to  make  more  strides  this 
year. 

In  the  business-to-business  e-commerce  sector,  big  information-services  providers  like  Oracle 
,  the  Netscape  -  Sun  Alliance  and  IBM  are  also  likely  to  chase  deals,  as  are  the  new  pure-play 
b-to-b  giants,  Ariba  and  Commerce  One,  which  just  acquired  Mergent  Systems. 

These  mergers  "are  virtuous,  they're  offensive  in  nature  and  they're  synergistic,"  said  Bradford 
C.  Koenig,  a  Goldman  Sachs  managing  director,  in  an  interview  last  month.  "These  are  all 
about  strategic  positioning  to  be  able  to  compete  better." 

For  many  companies,  they're  also  about  primping  for  Wall  Street.  By  raising  sales  through 
acquisitions,  firms  reassure  those  investors  who  value  Net  stocks  by  revenue  growth  rather 
than  profits.  "Wall  Street  expects  growth  and  M&As  are  a  piece  of  that,"  says  Carter  at 
Robertson  Stephens. 

In  this  respect,  the  AOL  deal  with  Time  Warner  could  be  something  of  a  breakthrough. 
Although  investment  bankers  have  used  very  different  methods  for  valuing  the  two 
companies,  the  market's  reaction  so  far  suggests  that  investors  take  a  positive  view  of 
combining  a  more  traditional  company  with  a  Net  company. 

Of  course,  mergers  and  acquisitions  have  not  always  been  considered  a  good  thing.  Critics 
attacked  them  in  the  past  as  little  more  than  financial  engineering  intended  to  inflate  a 
company's  value  and  pad  revenue  growth. 

Still,  even  before  the  AOL-Time  Warner  merger,  Net  deals  appeared  to  be  passing  muster 
among  investors. 

During  the  past  two  years,  Net  companies  that  have  announced  large  acquisitions  have  seen 
their  stock  prices  rise  that  day  an  average  of  nearly  3  percent  more  than  the  Standard  & 
Poor's  500  Index,  according  to  Ken  Sawyer,  managing  director  at  Prudential  Volpe 
Technology  Group.  In  contrast,  back  at  the  start  of  the  1990s  such  news  from  tech  companies 
was  greeted  by  an  average  increase  of  less  than  1  percent. 

"Historically  an  acquirer's  stock  price  has  declined  on  announcement  of  a  merger  transaction, 
but  that's  not  so  in  the  Internet  space,"  Sawyer  says.  "It's  a  Wild,  Wild  West  land  grab,  and 
M&As  are  a  key  part  of  the  dynamic." 
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YOUNG  COMPANIES  WITH  NEW  CURRENCY 

One  reason  that  analysts  are  forecasting  a  banner  year  for  Net  mergers  is  that  1999  saw  a 
^        record  number  of  Net  companies  go  public:  more  than  200.  If  1999  was  the  year  of  the  Net 
A       IPO,  expect  2000  to  be  the  year  of  the  Net  M&A. 

"As  spring  follows  winter,  M&A  activity  follows  IPOs,"  says  Koenig  of  Goldman  Sachs. 

Take,  for  instance,  IntraLinks,  a  3-year-old  online  financial  services  company  that  says  it  will 
go  public  by  March.  The  firm  does  not  plan  to  use  its  IPO  proceeds  to  support  operations  or 
buttress  its  already  healthy  sales.  Instead,  it  wants  to  buy  other  companies.  "We've  completed 
one  acquisition  to  date  and  we're  actively  looking  at  others,"  says  Mark  Adams,  chief 
executive  at  New  York-based  IntraLinks.  "It  could  be  expanding  into  new  markets  or  new 
areas,  or  acquiring  a  new  technology  that's  instrumental  in  improving  a  product  or  service  for 
our  customers." 

Not  long  ago,  the  urge  to  merge  at  a  firm  like  IntraLinks  would  have  been  seen  as  precocious 
at  best,  and  downright  foolhardy  at  worst.  A  young  company  that  needed  new  technology  or 
new  customers  would  develop  them  itself,  not  go  shopping  for  a  startup. 

That's  likely  to  change  this  year.  Barring  a  major  shift  in  the  financial  markets,  IntraLinks  and 
dozens  of  other  firms  will  follow  the  lead  of  heavy  hitters  like  Amazon,  eBay  and  Ariba,  all  of 
which  boosted  their  business  in  1999  through  aggressive  acquisitions. 

The  obvious  motivation  is  money.  A  record  number  of  Internet  IPOs  from  last  year  means  a 
lot  of  companies  have  stacks  of  stock  market  currency  to  spend.  Also,  many  of  these 
companies  have  gone  public  at  a  very  early  stage  in  their  development  and  still  need  to  add  a 
range  of  products  and  services.  Their  choice  is  to  either  develop  them  internally  or  buy  them. 
While  in  the  past  such  young  companies  wouldn't  have  the  capital  to  make  such  acquisitions, 
the  new  generation  of  companies  does. 

And  another  factor,  aside  from  all  the  IPO  wealth,  is  pushing  the  merger  trend.  In  the 
aftermath  of  the  holiday  season,  online  retail's  stronger  performers  will  likely  see  their  stocks 
rise,  while  those  of  their  weaker  rivals  will  fall.  In  such  an  environment,  the  big  companies  will 
naturally  turn  their  hungry  eyes  to  the  smaller  ones  -  and  the  smaller  ones  will  think  quickly 
about  joining  together  to  survive. 

THE  ROARING  2000s 

This  wave  of  merger  activity  actually  began  as  1999  ended.  A  lot  of  bankers  toiled  long 
^        hours  in  late  December.  At  Robertson  Stephens,  an  adviser  on  many  of  1999's  biggest  Net 
m       M&As,  Carter  says  he  was  working  on  six  deals,  two  of  which  involved  mergers  between 
W        major  e-commerce  companies.  Robertson  Stephens  is  now  looking  to  add  more  bankers  to  its 

M&A  team,  although  the  current  figure  -  more  than  100  -  is  five  times  the  number 

Robertson  had  a  few  years  ago. 

The  pace  is  also  accelerating  at  Deutsche  Banc  Alex.  Brown.  On  Sept.  22,  Broadbase 
Software,  which  creates  software  to  help  Web  sites  track  customer  information,  went  public. 
Just  days  later,  Broadbase  executives  approached  their  bankers  at  Deutsche  Banc  about 
possible  acquisition  strategies,  says  Jeff  Liu,  a  Deutsche  Banc  VP  responsible  for 
business-to-business  solutions.  By  early  December,  Broadbase  had  a  $330  million  deal  to  buy 
Rubric,  a  privately  held  maker  of  software  that  helps  businesses  conduct  Internet  marketing 
campaigns. 

"To  compress  all  of  that  into  a  couple  of  months  would  have  been  unheard  of  a  few  years 
ago,"  says  Karl  Will,  a  Deutsche  Banc  managing  director  in  charge  of  technology  M&As.  "It's 
now  taking  one  to  two  weeks  for  a  deal  to  happen  instead  of  one  to  two  months." 

Indeed,  Deutsche  Banc  expects  to  do  more  Net-related  M&As  in  the  first  quarter  of  2000 
than  it  did  for  all  of  1999,  says  Tony  Meneghetti,  another  managing  director  there. 

ONLINE  RETAIL:  SITES  ON  SALE 

Perhaps  no  area  of  the  Internet  Economy  is  riper  for  M&A  activity  than  online  retailing. 

One  faltering  retailer  is  already  a  prime  candidate  for  acquisition.  Just  before  the  new  year, 
Value  America  warned  that  sales  would  fall  below  expectations  and  said  it  would  cut  its  work 
force  in  half.  The  company  announced  it  would  evaluate  "strategic  refinement,"  a  euphemism 
often  used  by  firms  seeking  a  buyout. 

Some  analysts  think  M&A  activity  in  the  retail  sector  will  be  slowed  because  a  number  of  the 
candidates  are  struggling;  they  have  few  assets  worth  consolidating.  But  others  say  such 
companies  could  be  good  buys  for  land-based  retailers  that  seek  entry  to  e-commerce.  In 
1999,  for  instance,  retail  chain  KB  Toys  teamed  with  BrainPlay.com  to  form  KBkids.com. 

Mergers  in  online  retailing  will  undoubtedly  take  various  forms.  Some  struggling  online 

companies  will  seek  to  reshape  themselves,  while  others  try  to  buy  their  way  into  new  niches. 
^         Some  categories,  such  as  apparel,  should  be  big  enough  to  sustain  multiple  players,  if  each 
■         appeals  to  a  specific  segment  of  the  market.  On  the  other  hand,  categories  in  which  products 

are  commodities  -  such  as  consumer  electronics,  pet  supplies  or  gift  certificates  -  are  likely  to 

be  less  forgiving  of  second-tier  companies. 

"There  should  be  consolidation  but  I  don't  believe  all  categories  will  be  represented  by  single 
brands,"  says  Tod  Francis,  a  general  partner  at  Trinity  Ventures  ,  a  VC  firm  in  Menlo  Park, 
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Calif.,  that  has  backed  such  online  retailers  as  800.com,  iMotors.com,  Della.com  and  Internet 
Diamonds  (which  was  recently  renamed  BlueNile.com). 

w  Anthony  Noto,  an  e-commerce  analyst  at  Goldman  Sachs,  thinks  most  commerce  categories 

m        will  end  up  sustaining  three  or  four  major  players.  "In  a  particular  sector  you  may  see  players 
W        who  are  Nos.  5  and  6  combining  to  become  a  viable  No.  3,"  he  says. 

Noto  expects  online  retailers  in  narrow  market  sectors  to  reach  into  adjacent  categories  to 
attract  customers  and  revenues.  An  online  grocery  store,  for  instance,  might  consider 
acquiring  a  pet-supply  provider  or  even  a  Web-based  pharmacy. 

MyPoints  and  Netcentives,  two  companies  that  offer  one  piece  of  Internet  marketing,  will 
likely  be  targeted  by  larger  online  advertising  and  marketing  firms  that  want  to  broaden  their 
platforms,  expects  one  venture  capitalist,  who  spoke  on  condition  of  anonymity. 

Analysts  do  not  anticipate  that  the  heavyweights  will  rest  on  their  laurels  in  the  year  to  come. 
They  expect  Amazon  and  eBay  to  invest  in  companies  to  spread  their  franchises  into  new 
categories,  technologies  and  regions. 

That  was  the  strategy  behind  a  number  of  Amazon's  big  buys  last  year,  most  notably  a  string 
of  three  deals  involving  $645  million  in  stock,  which  were  announced  in  April.  Primarily  a 
seller  of  books  and  music  at  the  time,  Amazon  gobbled  up  Exchange.com  to  expand  into  rare 
books.  It  also  acquired  Alexa  Internet  and  Accept.com  to  get  some  tools  that  could  improve 
navigation  on  its  site.  The  company  also  made  sizable  investments  in  online  retailers  that 
complement  its  core  business,  including  Della.com,  Drugstore.com  and  HomeGrocer.com. 

EBay,  meanwhile,  has  bought  its  way  into  businesses  that  fit  its  emphasis  on  online  auctions: 
international  operations  in  Germany,  Butterfield  &  Butterfield  for  high-end  auctions  and 
Kruse  International  for  auto  auctions.  Recently  eBay  absorbed  Blackthorne  Software,  a 
company  that  makes  it  easier  for  active  sellers  to  manage  their  auctions.  Some  analysts  have 
suggested  that  eBay  might  now  move  into  the  business-to-business  space;  indeed,  it  has 
already  made  an  equity  investment  in  Tradeout.com,  a  site  for  surplus  corporate  materials. 

B2B:  SURVIVAL  OF  THE  BIGGEST 

The  business-to-business  side  of  e-commerce  is  expected  to  see  heavy  M&A  activity  in  the 
future,  although  the  sector  is  generally  thought  to  be  a  year  or  so  behind  online  retailing  in 
that  department.  Only  a  few  b-to-b  companies  have  made  their  public  debut  but  dozens  more 
are  expected  to  list  their  shares  in  the  coming  months  -  thereupon  pursuing  the  same  M&A 
strategy  that  was  followed  by  firms  that  went  public  in  the  past  couple  of  years. 

M        Want  a  glimpse  of  what's  to  come?  Consider  the  skyrocketing  valuation  of  Tradex 

W        Technologies,  a  Houston-based  company  that  sells  infrastructure  software  for  setting  up 

Internet  exchanges.  Tradex,  which  Ariba  plans  to  acquire,  saw  its  value  jump  from  $100 

million  earlier  in  the  year  to  nearly  $2  billion  in  December,  when  the  deal  was  announced. 

"Some  [investors]  think  they  left  some  money  on  the  table,  because  it  could  have  been  a  $4 
billion  to  $5  billion  IPO,"  says  Daniel  Aegerter,  Tradex's  chief  executive.  "We  were  ready, 
locked  and  loaded  to  take  this  out." 

So  why  didn't  he?  Aegerter  says  that  route  would  have  brought  the  company  money,  but 
argues  that  it  would  also  have  isolated  Tradex  from  the  large  networks  that  are  emerging  in 
the  b-to-b  marketplace.  Aegerter  calls  Ariba  one  of  the  "gorillas"  in  that  market,  and  he  thinks 
it's  better  to  be  on  Ariba's  good  side,  even  if  that  means  a  little  less  cash  in  the  short  run. 

Tradex  wasn't  the  only  company  to  be  bought  by  Ariba,  which  went  public  in  1999  and 
quickly  reached  a  stock  market  valuation  greater  than  $10  billion.  In  November  it  scooped  up 
Trading  Dynamics,  an  auction-based  marketplace  for  suppliers,  for  more  than  $400  million  in 
stock.  Meanwhile,  Ariba  rival  Commerce  One  swapped  cash  and  shares  worth  about  $230 
million  to  acquire  CommerceBid.com. 

Now  other  b-to-b  procurement  companies  are  looking  to  take  similar  steps.  Firms  like 
Intelisys  Electronic  Commerce,  a  second-tier  provider  of  infrastructure  for  online 
marketplaces,  know  that  if  they  want  to  compete  with  Ariba  and  Commerce  One  they'll  need 
auction  services.  Intelisys  board  member  Ray  Fattell  says  his  company  "absolutely"  will  have 
auction  capability,  and  that  it  will  consider  making  acquisitions  to  meet  that  need. 

A  possible  target  for  Intelisys  -  and  for  other  companies  seeking  to  develop  b-to-b  exchanges 
-  is  Moai  Technologies,  which  makes  auction  software  for  just  such  exchanges. 

(Ann  Perlman,  Moai's  chief  executive,  said  in  an  interview  in  December  that  the  company  was 
raising  another  round  of  venture  funding  and  was  not  involved  in  any  merger  talks.) 

The  motor  behind  all  this  merger  movement  is  the  trend  toward  b-to-b  trading  exchanges. 
While  there  are  about  200  such  marketplaces  in  various  niches  -  from  office  supplies  to  truck 
parts  -  only  a  few  have  gained  critical  mass. 

^  Kenneth  Fox,  managing  director  of  Internet  Capital  Group,  a  holding  company  with  stakes  in 
m  28  online  marketplaces,  predicts  that  leading  b-to-b  companies  will  consolidate  their  hold  on 
*  their  marketplace  niches,  then  seek  to  expand.  A  plastics  company,  for  example,  might  look 

to  move  into  chemicals.  "There  are  going  to  be  consolidation  opportunities  across  process 

industries,"  Fox  says.  "These  [online  marketplaces]  tend  to  be  winner-take-all.  You're  going  to 

see  No.  1  buy  No.  2  and  3." 
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\  More  privacy  battles 

Questions  about  the  data  collec- 
tion practices  of  an  Amazon.com  . 
subsidiary  have  prompted  a  con- 
frontation between  respected  com- 
puter security  expert  Richard  M. 
Smith  and  a  renowned  Internet  pio- 
neer Brewster  Kahle. 

Smith  has  uncovered  privacy  is- 
sues arising  from  software  flaws    . 
and  e-commerce  schemes.  Kahle  is 
founder  of  Alexalnternet,  which  is 
developing  softwaretomonitor 
consumer  visits  to  Web  sites  and 
search  for.  common  patterns  in 
.  the  aggregated  data  to  learn  about 
the  collective  navigation  of  Web 
users. 

Smith  filed  a  formal  complaint  - 
with  the  Federal  Trade  Commis- 
sion last  week  in  which  he  said  his 
test  of  the  Alexa  software  had  re-  " 
vealed  that  it  was  capable  of  gath- 
ering far  more  personal  data  about 
consumers  than  Amazon  tells  cus- 
tomers it  is  collecting. 

Smith,  who  earlier  this  year 
drew  widespread  attention  to  the 
privacy  practices  of  a  number  of 
large  Internet  companies,  includ- 
ing Microsoft  Corp.  and  RealNet- 
works, said  he  discovered  that 
Alexa  programs  occasionally  pass 
on  personal  information  including - 
, names,  postal  addresses,  phone 
numbers  and  e-mail  addresses. 

Kahle  defended  the  Alexa  tech- 
nology, saying  that  while  some  in- 
formation was  unavoidably  collect- 
ed from  Web  surfers,  the  impoitant 
point  was  that  the  information  was 
"not  stored  permanently  and  was 
not  used  to  connect  Web  behavior 
to  a  person's  identity. 
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User  claims  Amazon  collected  private  information 
By  Bloomberg  News 
Special  to  CNET  News.com 
January  7,  2000,  9:05  a.m.  PT 

Amazon.com  and  its  Alexa  Internet  unit  are  being  sued  by  an  user,  who  claims 
Alexa  secretly  intercepted  personal  information  and  sent  it  to  the  online 
retailer. 

In  a  suit  filed  today  in  San  Francisco,  plaintiff  Joel  D.  Newby,  who  says  he 
has  used  Alexa  software  since  1998,  claims  the  San  Francisco-based  company 
sent  confidential  information  to  Amazon,  which  bought  Alexa  last  April, 
without  his  consent. 

The  suit  requests  class-action  status.  It  seeks  $1,000  per  class  member  in 
damages,  plus  attorneys'  fees  and  profits  made  by  the  companies  as  a  result 
of  violating  laws.  The  class  members  could  number  in  the  millions,  the  suit 
says. 

A  representative  for  Seattle-based  Amazon,  which  sells  books  and  other 
products  through  its  Web  site,  referred  questions  about  the  lawsuit  to  Alexa 
Internet.  Alexa  officials  weren't  immediately  available  to  comment. 

The  suit  claims  that  Newby  and  others  weren't  told  their  personal 
information  would  be  collected  when  they  used  Alexa 's  software,  available 
through  its  Web  site,  to  find  out  information  about  other  Web  sites  they 
visited. 

Internet  software  maker  Macromedia  was  the  target  of  similar  complaints  last 
year,  the  suit  says.  When  the  problem  was  brought  to  that  company's 
attention,  it  developed  a  software  patch  so  personal  information  was  no 
longer  gathered. 

Corjvrioht  2000.  Bloombercr  L.P.  All  Riahts  Reserved. 
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Security,  privacy  issues  make  Net  users  uneasy 
By  Greg  Sandoval  and  Troy  Wolverton 
Staff  Writers,  CNET  News.com 
January  7,  2000,  1:20  p.m.  PT 

The  new  year  has  brought  with  it  a  glut  of  online  privacy  and  security 
issues,  reviving  questions  about  what  companies  are  doing  with  confidential 
information  about  their  users . 

In  the  latest  example  of  such  issues,  a  consumer  sued  Amazon.com  subsidiary 
Alexa  Internet  for  allegedly  sending  his  personal  information  to  the 
e-commerce  giant  without  his  consent.  Northwest  Airlines  users  also 
discovered  a  security  breach  in  the  company's  Web  site  that  potentially 
exposed  customers'  credit  card  numbers  and  other  personal  information. 

In  addition,  the  Federal  Trade  Commission  announced  yesterday  a  settlement 
with  ReverseAuction.com,  following  accusations  from  online  auction  giant 
eBay  that  the  auction  service  sent  its  users  misleading,  unsolicited  email. 

The  scrutiny  by  the  FTC  and  by  previous  media  reports  of  privacy  breaches 
has  prompted  many  consumers  to  take  extra  care  with  their  confidential 
information  online,  said  Forrester  Research  analyst  Christopher  Kelley. 

"I  think  that  retailers  are  starting  to  understand  that  consumers  are  taking 
this  seriously, "  he  said. 

The  recent  privacy  problems  come  at  a  time  when  advocates  and  consumers  are 
urging  the  federal  government  to  regulate  what  online  companies  can  do  with 
users'  personal  data.  Fifty  percent  of  online  consumers  want  the  government 
to  regulate  online  privacy,  according  to  a  recent  Forrester  study. 

Because  of  consumers'  privacy  concerns,  Forrester  estimated  that  e-commerce 
companies  lost  some  $2.8  billion  last  year.  Consumers  who  were  wary  of  how 
companies  would  use  their  personal  data  either  didn't  shop  online  or  spent 
less  than  other  consumers,  according  to  the  research  firm. 

One  such  company  that  could  have  a  lot  to  lose  is  Amazon,  which  bought  Alexa 
in  April.  Used  in  conjunction  with  a  Web  browser,  Alexa 's  software  lets 
users  have  constant  access  to  relevant  links  as  they  browse  the  Web,  while 
it  displays  traffic  and  rating  information  for  the  current  Web  page. 

In  the  lawsuit  filed  today,  Joel  D.  Newby,  who  claims  he  has  used  Alexa 's 
software  since  1998,  alleged  that  the  company  didn't  tell  him  that  it  would 
be  collecting  his  personal  information  while  he  used  the  software.  The  suit, 
which  Newby  filed  as  a  class  action  suit,  follows  a  complaint  filed  with  the 
Federal  Trade  Commission  last  month  by  security  expert  Richard  M.  Smith, 
which  alleged  that  Alexa' s  software  violated  privacy  laws. 

Amazon  representatives  directed  callers  to  an  Alexa  representative,  who  was 
not  available  for  comment . 

Andrew  Shen,  a  policy  analyst  at  the  Washington,  D.C. -based  Electronic 
Privacy  Information  Center,  compared  the  Alexa  case  to  recent  questions 
raised  about  how  RealNetworks  and  Microsoft  were  collecting  users ' 
information--aoDarentlv  without  the  users'  knowledae.  The  FTC  should 
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investigate  and  crack  down  on  such  abuses,  he  said. 

^B  "If  a  site  claims  to  tell  one  thing  and  then  does  another,  that  qualifies  as 
^^  an  unfair  and  deceptive  practice,"  Shen  said.  "It's  necessary  for  the 

government  agencies  responsible  for  guarding  privacy  to  enforce  the  laws . " 

Northwest  Airlines  confirmed  today  that  a  programming  error  recently 
compromised  its  Web  site  security.  The  breach,  which  is  now  closed,  involved 
an  area  on  the  site  where  customers  redeem  their  frequent  flier  miles, 
company  spokesman  Jon  Austin  said.  Austin  declined  to  disclose  when  the 
security  breach  occurred  or  how  long  it  was  open. 

Austin  blamed  the  problem  on  a  programmer  who  forgot  to  turn  the  encryption 
software  back  on  after  doing  some  maintenance  on  the  frequent  flier  page. 

Northwest  has  contacted  customers  who  used  the  site  while  the  breach  was 
open,  but  it  has  no  evidence  that  any  personal  information  was  compromised, 
Austin  said.  Northwest  values  its  customers'  private  information  and  tries 
to  keep  it  secure,  he  added. 

"This  has  never  happened  to  us  before, "  Austin  said.  "We  use  outside 
consultants  and  our  own  folks  to  test  the  integrity  of  the  site.  We  want 
people  to  feel  confident  in  using  our  Web  site." 

Unlike  the  simple  mistake  at  Northwest,  the  FTC's  settlement  with 
ReverseAuction  stemmed  from  a  mass  mailing  ReverseAuction  sent  to  several 
hundred  thousand  eBay  users  in  November.  According  to  eBay  and  the  FTC,  the 
"spam"  mailing  implied  that  the  users'  eBay  IDs  would  soon  expire  and  urged 
them  to  sign  up  with  ReverseAuction. 

^B  As  part  of  the  settlement,  ReverseAuction  agreed  to  destroy  any  personal 
information  it  gathered  from  eBay  customers  without  their  consent  and 
refrain  from  "making  misrepresentations  in  the  future . "  The  company  did  not 
pay  any  monetary  damages . 

Before  the  settlement,  eBay  filed  suit  against  ReverseAuction  alleging  the 
company  had  engaged  in  misleading  business  practices  and  had  gained 
unauthorized  access  to  its  Web  site. 

Jack  Horton,  ReverseAuction'  senior  vice  president  of  marketing,  denied  that 
ReverseAuction  violated  anyone's  privacy.  eBay  makes  public  all  of  its  user 
IDs,  and  any  user  can  access  any  other  user's  email  address.  In  effect,  eBay 
is  like  a  telephone  book  of  auction  users,  Horton  said. 

"If  users  look  at  their  eBay  user  agreement,  it  will  tell  them  that  this 
will  happen,"  Horton  said.  "It  says  you  can  expect  to  get  email  from  third 
parties.  We  don't  believe  that  eBay's  users  have  any  expectation  for  privacy 
for  their  user  ID  and  email  address." 

Attitudes  like  Horton' s  get  privacy  advocates  such  as  Shen  up  in  arms. 

The  FTC's  action  against  ReverseAuction  was  a  "slap  on  the  wrist"  because  it 
didn't  involve  any  serious  penalties,  Shen  said. 

Shen  questioned  whether  the  FTC  was  taking  privacy  seriously  and  called  for 
an  independent  agency  to  monitor  privacy  and  security. 

•"There  should  be  standards,  and  the  agency  should  be  granted  the  power  to 
level  penalties  and  punishments  as  it  deems  necessary, "  Shen  said. 
"Basically  we  need  something  other  than  companies  policing  themselves." 
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But  monitoring  online  privacy  is  already  one  of  the  top  priorities  of  the 

•FTC,  said  commission  spokeswoman  Victoria  Streitfeld.  The  commission  has 
an  Internet  lab  devoted  to  monitoring  online  privacy  concerns,  she  said. 
Over  the  last  five  years,  the  commission  has  worked  on  protecting  children's 
privacy  online  and  has  monitored  how  companies  track  clicks  made  on  their 
advertisements,  among  other  areas. 

"We  have  developed  innovative  ways  to  rid  out  fraud  and  deception  and  help 
protect  consumers  on  the  Internet, "  Streitfeld  said. 
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Security,  privacy  issues  make  Net  users  uneasy 

Filed  at  4:20  p.m.  EST 

By  Greg  Sandoval  and  Troy  Wolverton,  CNET  News.com 

The  new  year  has  brought  with  it  a  glut  of  online  privacy  and  security 
issues,  reviving  questions  about  what  companies  are  doing  with  confidential 
information  about  their  users . 

In  the  latest  example  of  such  issues,  a  consumer  sued  Amazon.com  subsidiary 
Alexa  Internet  for  allegedly  sending  his  personal  information  to  the 
e-commerce  giant  without  his  consent.  Northwest  Airlines  users  also 
discovered  a  security  breach  in  the  company's  Web  site  that  potentially 
exposed  customers'  credit  card  numbers  and  other  personal  information. 

In  addition,  the  Federal  Trade  Commission  announced  yesterday  a  settlement 
with  ReverseAuction.com,  following  accusations  from  online  auction  giant 
eBay  that  the  auction  service  sent  its  users  misleading,  unsolicited  email. 

The  scrutiny  by  the  FTC  and  by  previous  media  reports  of  privacy  breaches 
has  prompted  many  consumers  to  take  extra  care  with  their  confidential 
information  online,  said  Forrester  Research  analyst  Christopher  Kelley. 

"I  think  that  retailers  are  starting  to  understand  that  consumers  are  taking 
this  seriously, "  he  said. 

The  recent  privacy  problems  come  at  a  time  when  advocates  and  consumers  are 
urging  the  federal  government  to  regulate  what  online  companies  can  do  with 
users'  personal  data.  Fifty  percent  of  online  consumers  want  the  government 
to  regulate  online  privacy,  according  to  a  recent  Forrester  study. 

Because  of  consumers'  privacy  concerns,  Forrester  estimated  that  e-commerce 
companies  lost  some  $2.8  billion  last  year.  Consumers  who  were  wary  of  how 
companies  would  use  their  personal  data  either  didn't  shop  online  or  spent 
less  than  other  consumers,  according  to  the  research  firm. 

One  such  company  that  could  have  a  lot  to  lose  is  Amazon,  which  bought  Alexa 
in  April.  Used  in  conjunction  with  a  Web  browser,  Alexa' s  software  lets 
users  have  constant  access  to  relevant  links  as  they  browse  the  Web,  while 
it  displays  traffic  and  rating  information  for  the  current  Web  page. 

In  the  lawsuit  filed  today,  Joel  D.  Newby,  who  claims  he  has  used  Alexa '  s 
software  since  1998,  alleged  that  the  company  didn't  tell  him  that  it  would 
be  collecting  his  personal  information  while  he  used  the  software.  The  suit, 
which  Newby  filed  as  a  class  action  suit,  follows  a  complaint  filed  with  the 
Federal  Trade  Commission  last  month  by  security  expert  Richard  M.  Smith, 
which  alleged  that  Alexa ' s  software  violated  privacy  laws . 

Amazon  representatives  directed  callers  to  an  Alexa  representative,  who  was 
not  available  for  comment . 

Andrew  Shen.  a  oolicv  analvst  at  the  Washinaton.  D.C. -based  Electronic 
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Privacy  Information  Center,  compared  the  Alexa  case  to  recent  questions 
raised  about  how  RealNetworks  and  Microsoft  were  collecting  users ' 
information- -apparently  without  the  users'  knowledge.  The  FTC  should 
investigate  and  crack  down  on  such  abuses,  he  said. 

"If  a  site  claims  to  tell  one  thing  and  then  does  another,  that  qualifies  as 
an  unfair  and  deceptive  practice,"  Shen  said.  "It's  necessary  for  the 
government  agencies  responsible  for  guarding  privacy  to  enforce  the  laws . " 

Northwest  Airlines  confirmed  today  that  a  programming  error  recently 
compromised  its  Web  site  security.  The  breach,  which  is  now  closed,  involved 
an  area  on  the  site  where  customers  redeem  their  frequent  flier  miles, 
company  spokesman  Jon  Austin  said.  Austin  declined  to  disclose  when  the 
security  breach  occurred  or  how  long  it  was  open. 

Austin  blamed  the  problem  on  a  programmer  who  forgot  to  turn  the  encryption 
software  back  on  after  doing  some  maintenance  on  the  frequent  flier  page. 

Northwest  has  contacted  customers  who  used  the  site  while  the  breach  was 
open,  but  it  has  no  evidence  that  any  personal  information  was  compromised, 
Austin  said.  Northwest  values  its  customers'  private  information  and  tries 
to  keep  it  secure,  he  added. 

"This  has  never  happened  to  us  before, "  Austin  said.  "We  use  outside 
consultants  and  our  own  folks  to  test  the  integrity  of  the  site.  We  want 
people  to  feel  confident  in  using  our  Web  site." 

Unlike  the  simple  mistake  at  Northwest,  the  FTC's  settlement  with 
ReverseAuction  stemmed  from  a  mass  mailing  ReverseAuction  sent  to  several 
hundred  thousand  eBay  users  in  November.  According  to  eBay  and  the  FTC,  the 
"spam"  mailing  implied  that  the  users'  eBay  IDs  would  soon  expire  and  urged 
them  to  sign  up  with  ReverseAuction. 

As  part  of  the  settlement,  ReverseAuction  agreed  to  destroy  any  personal 
information  it  gathered  from  eBay  customers  without  their  consent  and 
refrain  from  "making  misrepresentations  in  the  future."  The  company  did  not 
pay  any  monetary  damages . 

Before  the  settlement,  eBay  filed  suit  against  ReverseAuction  alleging  the 
company  had  engaged  in  misleading  business  practices  and  had  gained 
unauthorized  access  to  its  Web  site. 

Jack  Horton,  ReverseAuction'  senior  vice  president  of  marketing,  denied  that 
ReverseAuction  violated  anyone's  privacy.  eBay  makes  public  all  of  its  user 
IDs,  and  any  user  can  access  any  other  user's  email  address.  In  effect,  eBay 
is  like  a  telephone  book  of  auction  users,  Horton  said. 

"If  users  look  at  their  eBay  user  agreement,  it  will  tell  them  that  this 
will  happen,"  Horton  said.  "It  says  you  can  expect  to  get  email  from  third 
parties.  We  don't  believe  that  eBay's  users  have  any  expectation  for  privacy 
for  their  user  ID  and  email  address." 

Attitudes  like  Horton ' s  get  privacy  advocates  such  as  Shen  up  in  arms. 

The  FTC's  action  against  ReverseAuction  was  a  "slap  on  the  wrist"  because  it 
didn't  involve  any  serious  penalties,  Shen  said. 

Shen  questioned  whether  the  FTC  was  taking  privacy  seriously  and  called  for 
an  independent  agency  to  monitor  privacy  and  security. 

"There  should  be  standards,  and  the  aaencv  should  be  aranted  the  oower  to 
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level  penalties  and  punishments  as  it  deems  necessary, "  Shen  said. 
"Basically  we  need  something  other  than  companies  policing  themselves." 

But  monitoring  online  privacy  is  already  one  of  the  top  priorities  of  the 
FTC,  said  commission  spokeswoman  Victoria  Streitfeld.  The  commission  has 
an  Internet  lab  devoted  to  monitoring  online  privacy  concerns,  she  said. 
Over  the  last  five  years,  the  commission  has  worked  on  protecting  children's 
privacy  online  and  has  monitored  how  companies  track  clicks  made  on  their 
advertisements,  among  other  areas. 

"We  have  developed  innovative  ways  to  rid  out  fraud  and  deception  and  help 
protect  consumers  on  the  Internet, "  Streitfeld  said. 
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BUSINESS  IN  BRIEF 


Amazon,  Alexa 
Sued  for  Grabbing 
Personal  Data 

Amazon.com  Inc.,  the  biggest  In- 
ternet retailer,  and  its  Alexa  Internet 
unit  are  being  sued  by  an  user  who 
claims  that  Alexa  secretly  intercept- 
ed personal  information  and  sent  it 
toAniazon.com. 

In  a  suit  filed  yesterday  in  San 
Francisco,  plaintiff  Joel  D  Newby, 
who  says  he's  used  Alexa  software 
since  1998,  claims  the  San  Francisco 
company  sent  confidential  informa- 
tion to  Amazon.com,  which  bought 
Alexa  in  April,  without  his  consent. 
The  suit  requests  class-action  status. 
It  seeks  $1 ,000  per  class  member  in 
damages,  plus  attorneys'  fees  and 
profits  made  by  the  companies  as  a 
result  of  violating  laws.  The  class 
members  could  number  in  the  mil- 
lions, the  suit  says.  A  spokeswoman 
for  Seattle's  Amazon.com  referred 
questions  about  the  lawsuit  to  Alexa 
Internet.  Alexa  officials  weren't  im- 
mediately available  to  comment. 

FCC  SETS  AUCTION  RULES:  Federal 
regulators  laid  down  ground  rules 
for  an  upcoming  airwaves  auction 


that  could  spur  the  growth  of  wire- 
less Internet  services  in  the  home 
and  on  the  road.  High-tech  and 
wireless  companies  have  been  eager 
to  get  their  hands  on  the  spectrum, 
which  is  considered  by  many  to  be 
"prime  real  estate"  because  of  its 
characteristics.  The  Federal  Com- 
munications Commission  set  the 
framework  under  which  it  will  free 
up  the  30  MHz  of  spectrum,  located 
in  the  700  MHz  band  As  part  of  the 
1997  Budget  Act,  Congress  directed 
the  commission  to  reallocate  that 
slice  of  the  airwaves  from  broadcast- 
ers —  who  had  been  using  it  for 
channels  60  through  69  —  to  com- 
mercial and  public  safety  services. 
TAX  RULING  ON  WEB  ADS:  Micro- 
soft Corp.  and  other  technology 
companies  said  an  Internal  Revenue 
Service  decision  on  certain  Internet 
web  advertising  arrangements  will 
reduce  cumbersome  tax  reporting 
requirements  and  remove  potential 
legal  liability.  At  issue  are  tax  report- 
ing requirements  for  companies 
that  exchange  so-called  banner  ads 


on  each  other's  Web  sites  under  bar- 
ter arrangements.  The  tax  law  re- 
quires companies  to  inform  the  IRS 
of  the  value  of  a  barter  transaction. 
NORTHPOINT,  MICROSOFT  PACT: 
North  Pojul  Communications, 
which  provides  Internet  services 
over  high-speed  telephone  lines, 
and  Microsoft  Corp.  said  they  ex- 
panded their  alliance  to  offer  broad- 
er Internet  access  to  consumers.  San 
Francisco's  NorthPoint's  digital  sub- 
scriber line  service  will  be  packaged 
with  Microsoft's  MSN  Internet  Ac- 
cess inTCsTmbdems  and  installa- 
tion services  sold  at  Tandy  Corp. 's 
RadioShack  stores  and  other  sales 
outlets. 

PACIFIC  GATEWAY  DEAL:  Burlin- 
game's  Pacific  Gateway  Exchange 
Inc.,  which  sells  phone-network  ac- 
cess to  long-distance  companies  and 
others,  agreed  to  buy  the  interna- 
tional business  of  NOS  Communi- 


caliot'.s  Inc.  for  $40  million  in  stock 
and  cash. 

E-TRADE  TO  OFFER  PLANNING: 
Mcnlo  Park's  E-Trade  Gioup  Inc., 
the  second-biggest  Internet  broker- 
age, will  provide  financial  planning 
services  on  its  Website  through  an 
agreement  with  DitectAdvice.com 
Inc.  Connecticut's  DirectAchice- 
com  charges  $75  a  year  foi  financial 
planing,  including  an  online  plan 
produced  in  less  than  a  minute 
based  on  information  provided  in  a 
questionnaire. 
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Lawsuit  charges  Amazon  with  tracking  information 

Amazon.com,  the  biggest  Internet  retailer,  and  its  Alexa  Internet  unit  are 
being  sued  by  a  user  who  claims  that  Alexa  secretly  intercepted  personal 
information  and  sent  it  to  Amazon.com. 

In  a  suit  filed  yesterday  in  San  Francisco,  plaintiff  Joel  D.  Newby,  who 
says  he's  used  Alexa  software  since  1998,  claims  the  San  Francisco-based 
company  sent  confidential  information  to  Amazon.com,  which  bought  Alexa  last 
Aoril.  without  his  consent.  The  suit  reouests  class-action  status. 
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Announcement  of  new  Web 
site  by  Cobalt  pushes  its 
stock  shares  to  higher  value 
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C-Sqiiare  buys  software 
company  from  Edmonds 


Chin.-;  bans  government 
use  of  Windows  2000 

Chinsi  will  ban  the  use  of  Micro- 
volt Corp.'s  new  Windows  2(10(1 
operating  system  al  important  govern- 
ment ministries  in  order  to  reduce  tlie 
country's  dependence  on  foreign  prod- 
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Amazon,  Alexa  Internet 
sued  over  Web  tracking 


nb 


Bloomberg  News 

SAN  FRANCISCO  —  Amazon.com 
Inc.,  the  biggest  Internet  retailer,  and 
its  Alexa  Internet  unit  were  sued 
Thursday  by  a  user  who  claims  that 
Alexa  secretly  intercepted  informa- 
tion and  sent  it  to  Amazon.com. 

In  a  suit  filed  in  San  Francisco, 
plaintiff  Joel  D.  Newby,  who  has  said 
he's  used  Alexa  software  since  1998, 
claims  the  San  Francisco-based  com- 
pany sent  confidential  information  to 
Amazon.com,  which  bought  Alexa  last 
April,  without  his  consent. 

The  suit  requests  class-action  sta- 
tus. It  seeks  $1,000  per  class  member  in 
damages,  plus  attorneys'  fees  and 
profits  made  by  the  companies  as  a 


result  of  violating  laws.  The  class 
members  could  number  in  the  mil- 
lions, the  suit  says. 

A  spokeswoman  for  Seattle-based 
Amazon.com,  which  sells  books  and 
other  products  through  its  Web  site, 
referred  questions  about  the  lawsuit  to 
Alexa  Internet. 

Alexa  officials  weren't  immediately 
available  to  comment. 

The  suit  claims  that  Mr.  Newby  and 
others  weren't  told  their  information 
would  be  collected  when  they  used 
Alexa's  software,  available  through  its 
Web  site,  to  find  out  information  about 
other  Web  sites  they  visited. 

Amazon.com  shares  fell  $4.19  to 
$65.56. 
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Women  still  scarce  at  the  top 

Women  m.iv  l.c  moving  up  to  corporate 
boards  anil  chief  executive  nffUcs,  but  a  na 
lional  study  concludes  that  the  glass  ceiling 
is  still  (irmly  in  place.  Women  make  up  just 
ID':'.,  ol  senior  manager,  in  I  urliinc  r>l)H 
companies,  according  to  a  Harvard  Busi- 
ness Review  article  published  tins  week, 

because  barriers  to  | notion  remain 

widespread. 

Change  sought  in  implant  ruling 

Dow  Corning  Corn,  and  an  organization 


aside  palt  of  last  month's  decision  that  al- 
lows women  who  voted  against  a  $3.2  bil- 
lion plan  In  settle  litigation  alleging  health 
problems  to  sue  the  company  separately. 

the  bankrupt,  v  icon;  urua'tinn  plan  thai  In 
theformei  lea,  I ,  ng  make,   ,,l  mIk  one-gel 


Lotus  Development  head  resigns 

IZnibattleil  Lotus  Development  nresiilenl 


takes  elfect  I  -eh.  I  I  le  will  be  succeeded  hi 
Al/ullar,  who  spent  his  23-year  c.ireci  ,il  ' 
IBM,  most  recently  as  general  manager  of 

IRS  reverses  deduction  decision 

businesses  will  gain  a  new  tax  deduction 

lor  the  costs  of  meeting  mteuialion.il  .inuli- 


lational  Organization  for  Standardi: 


Online  shopping  peaks  early 

Online  shopping  peaked  two  weeks  be- 
fore Chi  isirr.as  this  season,  leflecting  the 
lead  lime  needed  In  get  the  goods  shippei 
in  lime  lor  the  holiday,  according  lo  a  Got 
man  SachsiHCData  survej  .  During  the 
week  thai  ended  Uec.  12,  Into,  net  buvois 
spent  S1.2  billion,  with  computer  liaide.  a, 
($218  million)  and  luvs  (SW7  million)  lead 


Motorola  slips  in  chips  ranks 

Motorola  Inc.  slipped  to  Ihc  world's  No, 

to. focus  on  nioie  profitable  products,  Dalo- 
quest  said.  Motorola  sold  its  Semiconduc- 
tor  Components  Group  tor  $1  h  billion  in 

Texas  Pacific  Group,  colling  ils  chin  reve- 
nue and  ils  Linking,  aciouling  to  Gartner 
Group  Inc.'s  Dat.npjcsl  unit,  which  le 

j  Briefly 

United  Airlines:  I  he  world's  largest 

Prison  Realty  Trust  Inc.:  I'rison  Really 
shareholder  holder  Drcman  Value  Man- 
agement LLC,  which  holds  an  11.3"'..  stake 
ill  the  private  prison  operator,  said  il  may 
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Amazon  Accused  Of  Consumer  Privacy 
Abuse 

Jan  3  2000 

by:  Gomez  Staff 

Send  this  article  to  a  friend. 


Sometimes  I  feel  like...  somebody's  watching  me.  A  computer  security  expert  has 
accused  a  subsidiary  of  Amazon.com  of  abusing  consumers'  privacy,  The  New  York 
Times    recently  reported. 

Richard  Smith  filed  a  complaint  with  the  U.S.  Federal  Trade  Commission  claiming  that 
Alexa  Internet,  an  Amazon  subsidiary,  collects  data,  such  as  postal  and  e-mail  addresses, 
phone  numbers  and  credit  card  numbers,  without  informing  users. 

The  complaint  also  alleges  that  the  Alexa' s  recommendation  software  gathers 
information  about  the  items  people  search  for  and  passes  that  information  to  centralized 
computers  operated  by  Alexa. 

Amazon  bought  the  San  Francisco  data-collection  company  in  April  for  S250  million. 
Amazon  has  been  testing  the  Alexa  technology  for  use  in  its  upcoming  service  called 
ZBuhbles,  which  lets  consumers  find  and  post  reviews  about  products  while  shopping 
online. 

In  a  telephone  interview  with  the  NYT  ,  Alexa  founder  Brewster  Kahle  claimed  that 
although  the  company's  technology  collects  data  from  Web  surfers,  the  information  is  not 
stored  permanently,  nor  is  it  used  to  connect  Web  activity  to  an  individual  by  name. 

Back  in  April,  Gomez  Advisors  called  Amazon's  acquisition  of  Alexa  a  direct  assault  on 
Internet  privacy.  We  still  find  Alexa's  practices  unnerving,  to  say  the  least. 
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Amazon  Puts  zBubbles  on  Your  Screen 

Plus,  the  new  year  begins  with  a  pop-fizzle-record 

By  Jeff  Fischer  (TMF  Jeff) 

ALEXANDRIA,  VA  (Jan.  3,  2000)  --  The  year  2000  began  with  a  pop  as  the  Nasdaq  Composite 
posted  a  record  gap  (up  over  2.7%)  at  the  opening  bell.  This  bang-up  opening  led  to  a  quick  fizzle  as 
stocks  soon  deflated  like  a  year  2000  party  balloon.  In  the  end,  Nasdaq  closed  much  higher,  but  it  "only" 
gained  about  60  points  after  it  had  opened  120  points  higher.  Nonetheless,  it  was  another  record  close  for 
the  Nasdaq.  How  long  can  this  run  continue?  Well,  in  10  years,  the  market  will  likely  be  higher. 

For  a  Foolish  investor,  the  focus  is  never  a  single  day's  gain  or  loss,  which  is  winning  or  losing  a  mere 
battle.  Instead,  the  focus  is  on  a  lifelong  victory    -  winning  the  entire  war.  Harboring  a  long-term 
perspective  since  it  was  launched  in  1994,  the  Rule  Breaker  Portfolio  has  gained,  with  very  little  trading, 
1715%  versus  the  S&P  500's  gain  of  217%  and  the  Nasdaq's  474%  gain  over  the  same  period. 

Our  gain  isn't  magic.  It's  merely  the  result  of  good,  longer-term  investing  —  investing  the  likes  of  which 
anyone    can  achieve,  even  though  few  professionals  ever    do.  To  learn  about  this  real-money  portfolio's 
investing  style,  please  read  the  Rule  Breaker's  principles  linked  to  the  right,  or  start  right  here:  Principle 
1.  After  reading  these,  if  you  have  questions,  visit  the  Rule  Breaker  message  boards  linked  below  this 
column.  We're  here  to  help.  This  portfolio  isn't  about  showing  off,  it's  about  educating.  One  of  our 
greatest  wishes  is  that  the  people  who  learn  about  investing  through  us  go  on  to  outperform    us,  and 
many  of  you  do  exactly  that. 

This  daily  column  and  the  message  boards  are  a  great  tool,  although  "scattered"  by  nature.  If  you're 
interested  in  a  strictly  focused,  interactive  seminar  about  Rule  Breaker  investing  held  by  David  Gardner, 
see  the  promo  copy  at  the  end  of  this  column.  A  Rule  Breaking  seminar  begins  in  February. 

zBubbles  Poppin'  on  Your  Screen? 

Wal-Mart  (NYSE:  WMT)  finally  launched  its  online  store  in  "completed  form,"  but  yikes!  Wal-Mart's 
book  store  doesn't  carry  any    Fool  books,  not  to  mention  F.  Scott  Fitzgerald!  The  rest  of  the  site,  though 
fairly  well  made,  doesn't  appear  to  my  biased  eye  a  serious  threat  to  Amazon.com  (Nasdaq:  AMZN). 
Wal-Mart's  site  lacks  community,  and  so  many  other  features  (and  products)  that  swim  in  abundance  at 
Amazon. 

So,  despite  Wal-Mart's  cyber  arrival,  Amazon's  stock  surged  over  17%,  at  least  partially  on  word  that  it 
was  the  most-visited  commerce  site  over  the  holidays  as  measured  by  unique  visitors.  Amazon  was 
followed  by  eBay  (Nasdaq:  EBAY)  and  eToys  (Nasdaq:  ETYS).  Not  to  be  left  out,  America  Online 
(NYSE:  AOL)  partly  rose  on  word  that  its  merchants  achieved  billions  in  holiday  sales. 

There  wasn't  "new"  news  today,  but  there  is  something  new  on  the  horizon  from  Amazon  that  hasn't 
gotten  much  press  because  it's  in  beta  form.  It's  called  zBubbles. 

zBubbles  is  a  software  application  created  by  Amazon  subsidiary  Alexa  Internet.  The  software  allows  you 
to  conduct  price  comparisons  for  a  product  without  leaving  the  website  that  you're  visiting,  and  it  also 
allows  you  to  buy  the  product  directly  from  Amazon  with  1 -Click  at  anytime,  even  if  you're  on  the 
website  of,  say,  Buy.com.  Of  course,  competitors  are  raising  issue  with  the  software,  but  rather  than 
address  that  now,  let's  first  address  what  else  zBubbles  does. 

After  you  download  zBubbles,  whenever  you  visit  a  commerce  site  that  the  software  is  programmed  to 
compare  against,  a  small  icon  in  the  corner  of  your  Web  browser  changes  color.  Then,  next  to  the 
product  that  you're  viewing,  small  Z  icons  appear.  When  you  click  an  icon,  a  "bubble"  pops  up  to  cover 
one-fifth  of  your  screen.  The  bubble  shows  you  where  else  you  can  buy  the  product,  or  related  products, 
and  it  links  to  websites  that  may  offer  a  cheaper  price  or  even  a  better  product.  The  bubble  also  tells  you 
if  Amazon  sells  the  product  and,  if  it  does,  you  can  buy  the  product  from  Amazon  without  leaving  the  site 
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you're  visiting.  (It  also  links  to  customer  product  reviews  housed  on  Amazon.) 

k  zBubbles  will  largely  rely  on  an  interactive  userbase  to  build  out  the  service.  As  a  user,  you  can  make 
f  suggestions  on  where  to  find  a  product  at  the  best  cost.  You  can  also  suggest  related  products  that  may  be 
better;  in  the  process  of  making  these  suggestions,  you  can  write  a  full  product  review  into  zBubbles 
which  is  then  consolidated  into  a  collection  of  reviews  on  the  product  that  is  shared  with  all  users. 

Competitors  may  complain,  but  Amazon  has  the  bases  covered.  The  software  is  run  from  the  user's 
computer,  so  Amazon  isn't  tampering  with  other  websites.  Also,  the  zBubble  service  is  not    built  to  work 
on  the  sites  of  Amazon's  direct  e-commerce  competitors.  Not  yet,  anyway.  The  only  sites  programmed  to 
work  with  zBubbles  are  sites  offering  product  reviews  and  product  manufacturers'  sites,  or  sites  that  sell 
products  that  they  actually  manufacture  (like  3Com  or  Iomega).  That's  it.  It  is  up  to  consumers,  the 
zBubble  users,  to  build  the  database  that  compares  online  retailers  to  Amazon  and  to  one  another, 
including  Wal-Mart,  Buy.com,  CDnow,  eToys,  and  so  forth. 

Do  you  believe  consumers  will  build  a  large  database  of  product  comparisons?  I  certainly  do.  Could  this 
backfire  on  Amazon  by  causing  price  wars?  Perhaps.  But  probably  not.  Shopping  comparison  software 
already  exists  and  companies  are  not,  in  the  long  run,  going  to  price  themselves  into  bankruptcy.  So,  if 
anything,  zBubbles  may  result  in  further  dominance  and  trust  of  the  Amazon  brand  (and  the  Amazon 
community),  because  zBubbles  is  not    pushing  consumers  to  Amazon.  It  is  helping  consumers  find  the 
best  products  on  the  Internet  at  the  best  price.  In  the  process,  it  will  blur  the  boundaries  of  competition. 

To  download  the  beta  version  of  zBubbles  and  give  it  a  spin  yourself,  visit  this  link: 
http://www.zbubbles.amazon.com/getz.  The  official  launch  of  zBubbles  is  scheduled  for  early  this  year. 

Until   Next   Time... 

It's  2000.  When  better  to  begin  resolutions?  This  month,  the  Fool  offers  one  Foolish  resolution  a  day. 
Don't  miss  these  "must  dos." 

f  Next,  start  to  plan  for  retirement  with  the  Fool's  new  Retiree  Portfolios.  Every  Monday,  David  Braze 
(TMF  Pixy)  offers  a  new  column  on  retiree  investing,  and  the  real-money  portfolios  are  always  updated. 

Finally,  and  partially  in  relation  to  Celera  (NYSE:  CRA).  TMF  GetFit,  ElricSeven,  and  I  are  visiting  the 
headquarters  of  Human  Genome  Sciences  (Nasdaq:  HGSI)  tomorrow.  If  you  have  questions  you'd  like 
asked,  please  post  'em  on  the  HGSI  message  board  tonight.  (Don't  know  what  Human  Genome  Sciences 
does?  Visit  Fool  Quotes  &  Data  and  look  up  the  snapshot.) 

Fool  on  in  2000! 
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Subject:   zBubbles  (RB  report)  Date:    1/3/00  8:03  PM 

Author:   howardroark  Number:    33614  of  35789 

In  tonight's  RB  report,  TMF  Jeff  anticipated  the  argument  that  Amazon's  zBubbles  concept  might  create 
debilitating  price  wars: 

Do  you  believe  consumers  will  build  a  large  database  of  product  comparisons?  I  certainly  do.  Could  this 
backfire  on  Amazon  by  causing  price  wars?  Perhaps.  But  probably  not.  Shopping  comparison  software 
already  exists  and  companies  are  not,  in  the  long  run,  going  to  price  themselves  into  bankruptcy.  So,  if 
anything,  zBubbles  may  result  in  further  dominance  and  trust  of  the  Amazon  brand  (and  the  Amazon 
community),  because  zBubbles  is  not  pushing  consumers  to  Amazon.  It  is  helping  consumers  find  the 
best  products  on  the  Internet  at  the  best  price.  In  the  process,  it  will  blur  the  boundaries  of  competition. 

I  think  that  this  paragraph  presents  an  oversimplified  analysis  of  an  important  part  of  Amazon's  valuation 
picture:  can  it  sustain  ample  margins  down  the  road  to  justify  its  current  market  cap?  ('Oversimplified'  is 
not  meant  pejoratively  toward  TMF  Jeff,  here;  the  format  of  the  daily  RB  report  almost  demands 
oversimplification,  in  general.) 

It  may  be  true  that  zBubbles,  themselves,  don't  pose  a  significant  threat  to  Amazonian  margins.  I  don't 
know  enough  about  the  software,  but  I  assume  that  users  could  not  create  1 -click  buying  opportunities 
from  other  sites  when  perusing  Amazon  (although  it  seems  they  could  get  information  from  other  users 
about  better  prices  elsewhere),  like  they  can  if  they  are  elsewhere  and  want  to  buy  from  Amazon.  But  the 

|  inherent  zBubble  advantage  won't  exist  in  other  price  comparison  iterations  from  other  sources,  and  those 

*  tools  seem  likely  to  make  instant  price  shopping  easier  and  easier. 

The  lower  the  switching  costs  to  the  consumer,  the  more  price  will  be  the  determinate  buying  factor. 
TMF  Jeff  notes  two  potential  arguments  against  this  inevitability: 

Shopping  comparison  software  already  exists 

That's  true.  But  is  there  evidence  that  price  wars  haven't  already  erupted  on  the  internet?  Internet 
retailers  have  had  difficultly  delivering  profitability,  but  their  nascent  stages  make  it  hard  to  pinpoint  the 
causes.  We  do  know  that  e-storefronts  like  buy.com  and  megadepot  are  offering  zero  margin  prices. 
Using  shopping  software  is  clearly  less  of  a  switching  cost  than,  say,  driving  across  town  from  Best  Buy 
to  Circuit  City.  Zbubbles  is  even  easier.  What  will  be  next?  What  if  you  could  walk  into  Sephora,  try  out 
eighty  different  bottles  of  whatever,  enjoy  the  fancy  European  decor  and  morbidly  dressed  European 
supermodel  salespeople,  and  then  walk  up  to  the  register  counter  to  view  eleven  different  clerks  with 
eleven  different  prices?  The  Sephora  clerk  would  still  be  well  dressed,  but  lonely. 

If  by  pointing  out  that  shopping  bots  already  exist,  and  are  likely  to  proliferate  is  only  to  say  that 
zBubbles  or  no  zBubbles  the  switching  costs  are  shrinking,  you  have  a  point.  But  the  early  emergence  of 
these  shopping  sites  (those  not  purchased  and  subsequently  hidden  in  a  closet  by  Amazon)  doesn't  indicate 
that  price  wars  won't  result  from  improved  visibility  and  reduced  switching  costs.  Ahhh...  but: 

and  companies  are  not,  in  the  long  run,  going  to  price  themselves  into  bankruptcy. 

Crazy  Eddie  would  be  glad  to  hear  that,  assuming  he  has  the  appropriate  access.  Companies  certainly 
don't  want  to  price  themselves  into  bankruptcy,  but  simply  stating  that  they  don't  sounds  like  a  tautology 
at  best.  Maybe  industries  don't  price  themselves  into  bankruptcy,  but  they  sure  can  price  themselves  into 

I  near  zero  margin  cyclically  and  commodity  nests  with  plenty  of  Chapter  7  &  1 1  fallouts  along  the  way. 

"  Regardless,  Amazon  doesn't  need  to  simply  avoid  bankruptcy  to  be  a  good  investment,  it  needs  to  avoid 
being  a  commodity  broker  with  near  zero  margins,  and  it  needs  to  avoid  it  by  a  long  shot  (a  note  to 
coralville,  here,  that  I  neatly  postpone  the  moentizing  issue).  Companies  have  proven  over  and  again  that 
without  conglomerate  monopolistic  control  (Rockefeller),  price  or  production  collusion  (and  even  then, 
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often,  see  OPEC),  individualized  sustainable  business  advantages,  or  government  regulatory  controls,  they 
often  price  below  their  long  term  economic  best  interest.  Or,  at  least,  will  create  very  unprofitable 
I  investment  vehicles. 

So,  when  TMF  Jeff  says  that: 

So,  if  anything,  zBubbles  may  result  in  further  dominance  and  trust  of  the  Amazon  brand  (and  the 
Amazon  community),  because  zBubbles  is  not  pushing  consumers  to  Amazon.  It  is  helping  consumers 
find  the  best  products  on  the  Internet  at  the  best  price.  In  the  process,  it  will  blur  the  boundaries  of 
competition. 

I  think,  beyond  sounding  slightly  nationalistic  toward  the  sovereign  republic  of  Amazon,  this  rightly 
implies  that  the  biggest  problem  of  the  internet  vendor  will  be  the  blurring  of  the  boundaries  of 
competition.  More  specifically,  the  facility  of  consumer  switching,  even  in  the  face  of  ostensibly  value 
advantaged  sites.  Whether  this  will  be  resolved  by  innovative  e-tailers  that  manage  to  prevent  or  frustrate 
the  bifurcation  between  the  shoppping  experience  and  the  buy,  by  pricing  power  from  a  few  big  players, 
by  the  incredible  power  of  consumer  inertia  in  the  face  of  easy  switching,  or  by  a  cyclical  or  eradicated 
middleman  commerce  segment,  I  have  no  idea.  But  I  don't  think  you  can  ignore  the  danger  by  relying  on 
companies  not  to  price  themselves  out  of  the  game,  or  because  e-tailers  haven't  gone  bankrupt,  yet. 
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Amazon.com  Faces  Complaint  on  Software 
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An  Internet-security  consultant  has  filed  a  complaint  against 
Amazon.com  Inc.  with  the  U.S.  Federal  Trade  Commission,  stating  that 
Internet-monitoring  software  offered  by  a  subsidiary  of  the  online 
retailer  is  gathering  more  personal  information  about  consumers  than  the 
company  is  disclosing. 

Richard  M.  Smith  of  Massachusetts  filed  the  complaint  last  Tuesday 
after  he  discovered  that  in  certain  cases  an  add-on  component  to  Web 
browsers  offered  by  Alexa  Internet  in  San  Francisco  is  collecting 
personal  data,  such  as  addresses,  telephone  numbers  and  credit-card 
numbers.  This  software  is  designed  to  provide  users  a  summary  of  the  Web 
page  they  are  viewing,  along  with  a  list  of  related  Web  sites,  and  forms 
the  basis  for  a  coming  comparison-shopping  service  called  zBubbles  that 
is  already  being  tested  by  Amazon.  At  the  same  time,  Mr.  Smith  said,  the 
software  sends  information  collected  from  users'  computers  to  Alexa 's 
Web  server  without  their  knowledge. 

In  a  letter  sent  to  Amazon.com  Chief  Executive  Jeff  Bezos  and  the 
FTC,  Mr.  Smith  said  he  believes  the  transmission  of  the  personal  data 
breaches  the  software's  licensing  and  usage  agreement,  and  may  violate 
several  federal  laws  in  the  U.S.,  including  the  Computer  Fraud  and  Abuse 
Act  and  the  Electronic  Communications  Privacy  Act.  Mr.  Smith,  who  has 
become  a  well-known  privacy  advocate,  previously  publicized  the 
existence  of  a  serial  number  in  Microsoft  Corp. 's  Word  documents  and 
questioned  the  software  company's  intention  in  amassing  such  numbers  in 
its  database. 

Mr.  Smith's  complaint,  reported  in  the  New  York  Times,  recommends 
that  Amazon.com  remove  the  zBubbles  software  from  its  Web  site  and  that 
the  company  temporarily  turn  off  the  Web  servers  that  receive  personal 
data  from  current  zBubbles  users.  Mr.  Smith  also  requested  that  Alexa 
modify  the  software  so  that  it  no  longer  will  collect  the  personal 
information. 

Brewster  Kahle,  Alexa 's  president,  said  his  company  strongly  respects 
users'  privacy  and  doesn't  review  such  information  collected  on  its 
servers.  "We're  very  up-front  about  what  the  service  has  done  and  why," 
Mr.  Kahle  said.  "We  basically  don't  know  who's  who,  and  we 
systematically  delete  information." 

Amazon.com  spokesman  Bill  Curry  said  the  company  stands  by  Mr.  Kahle 
and  its  subsidiary's  products  while  the  FTC  handles  the  complaint. 
"We're  perfectly  willing  to  work  with  them  and  explain  to  them  the  Alexa 
software,  the  technology  and  the  policies  in  place,"  Mr.  Curry  said. 

Nonetheless,  Mr.  Smith,  countered:  "There  really  is  no  legal 
protection  once  they  get  that  data.  It's  just  their  promise.  My 
contention  is  that  the  information  should  never  be  sent  in  the  first 
place. " 
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WORLDWIDE 


Waste  Management 
Files  Suit  Charging 

Acquisition  Fraud 


Waste  Management  Inc.  said  it  vastly  overpaid  in  its  $1.15  billion 
(1.14  billion  euro)  acquisition  of  Eastern  Environmental  Services  Inc.  a 
year  ago,  alleging  in  a  lawsuit  that  Eastern's  chairman,  Louis  D. 
Paolino  Jr.,  orchestrated  "a  classic  pump  and  dump,"  overstating  the 
profits  of  his  company  through  accounting  fraud  and  then  selling  it. 

The  lawsuit,  filed  in  a  U.S.  court  in  Delaware,  includes  assertions 
that  John  E.  Drury,  Waste  Management's  former  chairman  and  chief 
executive  officer,  and  Rodney  R.  Proto,  its  ousted  president,  personally 
benefited  from  dealings  with  Mr.  Paolino,  even  as  the  company  they  ran 
was  injured.  Messrs.  Drury  and  Proto  weren't  named  as  defendants. 

The  assertions  in  the  lawsuit  are  the  first  public  sign  that  Waste 
Management  is  investigating  the  personal  financial  dealings  of  Messrs. 
Drury  and  Proto  during  the  time  they  ran  the  company.  Their  involvement 
in  three  other  transactions  is  also  under  review  by  the  company,  a 
person  familiar  with  the  investigation  said. 

The  lawsuit  arises  out  of  a  sprawling  effort  by  Waste  Management's 
board  to  determine  how  the  company's  $19  billion  merger  with  USA  Waste 
Services  Inc.  went  wrong,  and  how  the  company's  management  lost  control 
of  its  operations  and  accounting  systems  in  the  months  after  the  July 
1998  merger. 


Steel  Firm  Battles  Takeovers 


BETHLEHEM,  Pennsylvania  --  Bethlehem  Steel  Corp.  amended  its 
stockholder-rights  plan,  making  it  more  difficult  for  the  company  to  be 
taken  over.  The  move  comes  two  weeks  after  WHX  Corp.,  of  New  York, 
purchased  a  1.6%  stake  in  Bethlehem  Steel,  sparking  takeover  rumors. 

Under  the  newly  amended  stockholders  rights  plan,  anyone  who  acquires 
at  least  5%  of  the  company  will  trigger  a  mechanism  that  will  allow 
existing  shareholders  to  buy  more  company  stock  at  a  reduced  price.  The 
previous  trigger  level  was  15%. 

The  5%  trigger  does  not  apply  to  existing  shareholders  who  own  more 
than  5%  of  the  company. 
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Officials  Escape  Prosecution 

The  U.S.  attorney's  office  in  Miami  has  decided  not  to  prosecute  five 
current  and  former  high-ranking  executives  of  Columbia/HCA  Healthcare 
Corp.  and  Olsten  Corp.  --  a  development  seen  by  some  people  on  both 
sides  as  a  blow  to  the  government's  case  against  Columbia. 

The  decision  culminates  an  exhaustive  two-year  criminal  probe  by 
government  prosecutors  in  Miami  of  alleged  Medicare  fraud  involving  home 
health  care,  and  it  comes  as  talks  between  the  Justice  Department  and 
Columbia  to  reach  a  partial  civil  settlement  in  a  broad  national 
investigation  have  intensified.  A  settlement  is  said  to  be  close, 
according  to  some  people  involved  in  the  talks,  including  government 
officials. 

Despite  the  Miami  decision,  a  national  criminal  probe  involving 
Columbia  by  the  Justice  Department  and  U.S.  attorneys  around  the  country 
is  continuing. 

U.S.  Utility  Sells  Land  Near  U.N. 

NEW  YORK  --  In  one  of  Manhattan's  biggest  land  deals  of  the  1990s, 
Consolidated  Edison  Inc.  has  decided  to  sell  3.6  hectares  of  prime  real 
estate  near  the  United  Nations  to  a  group  including  New  York  developers 
Sheldon  Solow  and  Fisher  Brothers  and  Morgan  Stanley  Dean  Witter  &  Co., 
people  familiar  with  the  deal  said. 

The  four  parcels  could  support  as  much  as  five  million  square  feet  of 
office,  residential  and  retail  development  once  zoning  changes  are 
approved,  according  to  a  city  planning  department  estimate.  "This  is  not 
going  to  be  a  little  village,"  the  planning  department's  director, 
Joseph  Rose,  said.  "We're  talking  about  fundamentally  transforming  that 
area  of  town . " 

Details  of  the  winning  bid,  including  the  price,  weren't  disclosed. 
Con  Ed  declined  to  comment,  as  did  members  of  the  Solow  group. 

Merger  Partners  May  Face  Fines 

ST.  LOUIS  --  Monsanto  Co.  and  Pharmacia  &  Upjohn  Inc.  have  a  year  to 
complete  their  proposed  merger,  and  each  company  could  face  as  much  as 
$575  million  (571  million  euros)  in  breakup  fees  should  the  deal  fall 
through,  according  to  filings  made  with  the  U.S.  Securities  and  Exchange 
Commission. 

If  there  is  a  material  breach  of  the  contract  by  either  party,  the 
deal  can  be  canceled.  Pharmacia  would  pay  Monsanto  $575  million  in 
breakup  fees.  Monsanto  could  be  forced  to  pay  Pharmacia  $575  million 
should  Monsanto  shareholders  fail  to  approve  the  deal  or  if  Monsanto 
accepts  another  offer. 

FedEx  to  Impose  Fuel  Surcharge 
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Federal  Express  Corp.  will  add  a  fuel  surcharge  of  3%  to  most 
domestic  and  international  delivery  services  as  of  Feb.  1. 

The  Tennessee  delivery  giant  also  said  it  will  add  a  separate 
surcharge  of  10  cents  a  kilogram  for  international  airport-to-airport 
and  express  freight  shipments.  FedEx,  a  unit  of  FDX  Corp.,  said  the 
surcharges  reflect  higher  fuel  prices . 

"We  have  held  off  on  this  decision  in  order  to  assist  our  customers 
in  getting  through  their  very  important  peak  shipping  season, "  said  Alan 
B.  Graf,  FDX's  chief  financial  officer.  He  added  that  "the  price  of  our 
services  must  appropriately  reflect  our  increased  costs." 


Tesoro  Petroleum  Sells  Unit 


Tesoro  Petroleum  Corp.  completed  the  sale  of  its  Bolivian-based 
exploration  and  production  operations  to  a  unit  of  British  energy 
concern  BG  PLC  for  about  $100  million  (99.4  million  euros)  in  stock. 

With  the  move,  the  San  Antonio  refining  and  natural-gas  concern 
officially  exited  from  the  exploration  and  production  business,  carrying 
through  on  a  company  strategy  outlined  in  May  to  focus  on  refining  and 
marketing.  Last  week,  Tesoro  closed  the  sale  of  its  U.S.  exploration  and 
production  business  to  EEX  Corp.,  of  Houston,  for  $215  million. 


Utility  Deal  Could  Fall  Apart 


Western  Resources  Inc.'s  plan  to  buy  Kansas  City  Power  &  Light  Co., 
one  of  the  utility  industry's  most  protracted  merger  deals,  could 
collapse  as  soon  as  this  month,  according  to  people  familiar  with  the 
situation. 

Western's  tenacious  courtship  --  it  was  rejected  three  times  by 
Kansas  City  Power's  board  before  it  finally  got  the  nod  in  February  1997 
--  was  closely  watched  by  investors  and  analysts  because  it  defied 
conventional  wisdom  that  hostile  deals  couldn't  be  done  in  the  heavily 
regulated  utility  business. 

The  $2  billion  (1.99  billion  euro)  deal  that  was  struck  with  Kansas 
City  Power  is  now  in  serious  trouble,  primarily  because  Western's  stock 
is  trading  at  far  less  than  the  $31  it  fetched  when  the  stock-for-stock 
transaction  was  struck.  The  deal  also  had  a  provision  that  either 
company  could  back  out  if  regulatory  approvals  weren't  granted  by  the 
end  of  1999. 

Western  Resources  stock  has  been  sagging  for  months.  On  Friday,  it 
closed  at  $17,125,  unchanged  on  the  day,  at  4  p.m.  on  the  New  York  Stock 
Exchange . 


Amazon.com  Faces  Complaint 


An  Internet- security  consultant  has  filed  a  complaint  against 
Amazon.com  Inc.  with  the  U.S.  Federal  Trade  Commission,  stating  that 
Internet-monitoring  software  offered  by  a  subsidiary  of  the  online 
retailer  is  aatherina  more  oersonal  information  about  consumers  than  the 
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company  is  disclosing. 

A    Richard  M.  Smith  of  Massachusetts  filed  the  complaint  last  week  after 
^^  he  discovered  that  in  certain  cases  an  add-on  component  to  Web  browsers 
offered  by  Alexa  Internet  in  San  Francisco  is  collecting  personal  data, 
such  as  addresses,  telephone  numbers  and  credit-card  numbers.  This 
software  is  designed  to  provide  users  a  summary  of  the  Web  page  they  are 
viewing,  along  with  a  list  of  related  Web  sites,  and  forms  the  basis  for 
a  coming  comparison-shopping  service  called  zBubbles  that  is  already 
being  tested  by  Amazon. 

At  the  same  time,  Mr.  Smith  said,  the  software  sends  information 
collected  from  users '  computers  to  Alexa ' s  Web  server  without  their 
knowledge . 

IBM  Workers  Snare  "Award' 

Those  feisty  International  Business  Machines  Corp.  employees  who 
rallied  against  Big  Blue  messing  with  their  pensions  have  been  rewarded 
yet  again  for  their  unrest. 

An  online  magazine  called  Disgruntled  has  awarded  the  IBMers  its 
"Disgruntled  Employees  of  the  Year. "  The  Web-zine,  which  describes 
itself  as  "the  business  magazine  for  people  who  work  for  a  living, " 
chose  the  computer- industry  faction  for  its  fight  against  a  new  "cash 
balance"  pension  plan  that  would  have  cut  benefits  to  older  workers  by 
as  much  as  40%  and  for  the  continuing  attempts  to  organize  a  union. 

^  Their  battle  not  only  got  IBM  to  backpedal;  it  brought  U.S.  national 

B  attention  to  the  controversial  corporate  trend  toward  cash-balance 
plans . 

Dow  Jones  to  Sell  IDD  Unit 

Dow  Jones  &  Co.  will  sell  its  IDD  Enterprises  LP  unit  to  Platinum 
Equity  Holdings,  a  closely  held  investment  firm  in  Los  Angeles. 

Terms  weren't  disclosed,  but  a  person  familiar  with  the  deal  said  the 
sale  price  was  between  $12  million  and  $15  million  (11.9  million  euros 
to  14.9  million  euros). 

Dow  Jones,  based  in  New  York,  said  the  sale  would  result  in  a  charge 
against  fourth-quarter  earnings,  but  it  didn't  disclose  the  amount.  IDD, 
acquired  by  Dow  Jones  in  1995,  is  an  electronic  financial  database  that 
provides  end-of-day  and  historical  stock-market  quotes,  as  well  as 
corporate  data,  through  its  Tradeline  databases. 

Dow  Jones,  publisher  of  The  Wall  Street  Journal  and  The  Wall  Street 
Journal  Europe,  said  the  move  is  part  of  efforts  to  shed  noncore  assets. 

Taiwan  Investment  in  China  Falls 

■t    TAIPEI  --  The  Taiwan  government  approved  a  total  US$1.2  billion  (1.19 
P  billion  euros)  of  Taiwanese  companies'  investments  in  China  during  the 

first  11  months  of  the  year,  down  11%  from  the  year-earlier  span,  the 

Investment  Commission  said. 
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The  decline  was  attributed  in  part  to  Taiwan  companies  taking  a 
cautious  outlook  about  Chinese  investment,  as  business  risks  and 
production  costs  in  China  were  rising,  said  the  commission,  which  is 
under  the  Ministry  of  Economic  Affairs. 

During  the  first  11  months,  the  government  approved  US$3.51  billion 
in  foreign  investment  in  Taiwan,  up  16%,  the  commission  said. 
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Bacon's 

Battle  Lines 
Forming 
On  e-Privacy 


San  I r.inusco  -  Questions  about  the 
data  collection  practices  ol' a  stthsidiarx  of 
Amazon,  llic  Internet's  largest  retailer.  luxe 
erupted  in  a  confrontation  between  a 
respected  computer  security  expert  and  a 
renowned  Internet  pioneer. 

The  secuntv  expert  is  Richard  M.  Smith, 
who  lias  recently   dedicated  much  of  his 

issues   arising    from   software   (laws   and 

c-commerce  schemes. 

The  Internet  pioneer  is  Brewster  Kilhlc, 
founder  of  Alexa  Internet,  the  San 
Iiancisco-bascd  Amazon  suoMdiary  that 
developed  the  data-collection  software  in 
question.  The  software  is  hem;;  tested  lor 
use  with  Amazon's  forthcoming  /.Bubbles 
cimmarison-shopping  service. 

Hie  software,  which  is  currently 
available  onl\  in  a  trial  version  and  onlv  on 
the  Alexa  Web  site,  monitors  which  sites  a 
consumer  visits,  looks  for  patterns  shared  by 
many  individual  shoppers  and  then 
aggregates  information  about  the  collective 
n. i\  ipalion  ol  Wch  users. 

Ii  is  designed  to  continual!)  learn  about 
shopping  behavior  and  improve  the  cjualitv 
of  information  it  nukes  available  to 
consumers. 

Smith  this  week  filed  a  formal  complaint 
with  the  I  ederal  Trade  Commission  in 
which  he  said  his  examination  of  the 
behavior  of  the  Alexa  software  had  revealed 
that  it  was  capable  of  gathering  far  more 

Ama/.on  tells  customers  it  is  collecting. 

Smith,  who  earlier  this  Near  drew 
widespread  attention  to  the  privacy 
practices  of  a  number  of  large  Internet 
companies  including  Microsoft  Corp.  and 
RealNetworks,  said  he  discovered  that  both 
Alexa  programs  occasionallv  pass  on 
personal  information  including  names, 
postal  addresses,  phone  numbers  and  e-mail 
addresses. 

They  also  gather  information  about  the 
things  people  are  searching  for  and  pass  all 
this  data  to  network  server  computers 
operated  by  Alexa. 

"I  believe  that  the  transmission  of  this 
personal  data  is  a  breach  of  the  /.Bubbles 
License  and  Usage  Agreement."  Smith 
asserted  in  a  letter  to  Jeff  Bezos.  Amazon's 
chairman.  "In  addition,  the  software  may 
also  violate  a  number  or  federal  laws 
including  the  Computer  Fraud  and  Abuse 
Act  and  the  Electronic  Communications 
Privacy  Act." 

Ka'hlc  defended  the  Alexa  technology, 
saving  that  while  some  information  was 
unavoidably  collected  from  Web  surfers,  the 
important  point  was  thai  the  inhumation 
was  not  stored  permanently  and  was  not 
used  to  connect  Web  behax  ior  to  a  person's 
identity. 

"The  standard  that  we're  attempting  to 
uphold."     Kahle     said,    "is    that    if  a 

subpoena    us    and    ask.    'Where   was    an 
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Interne! 

The  Web's  'Southern'  twang 


By  Keith  Dawson  ^"^ 
Special  to  boston.com 

We've  all  been  there.  Cruising  along  the  Web,  reflecting  on  the  glories  of  instant  information.  Then  we  sideswipe  the  404  wall.  Or  crash 
headlong  into  it,  rather.  While  the  Web  has  reached  near  ubiquity,  so  have  those  annoying  error  messages.  Ever  wonder  exactly  how  much 
of  the  Web  is  really  missing  in  action? 

I'm  privileged  to  run  a  private  mailing  list  on  which  I  can  enjoy  the  opinions  of  a  lot  of  very  smart  people,  and  share  them  with  you.  Anton 
Sherwood,  one  of  the  list's  participants,  recently  posed  the  following  question:  How  common  are  404s?  (Sherwood  also  suggested  the 
appropriate  jargon:  A  page  that  has  gone  missing  has  "moved  to  Atlanta,"  in  area  code  404.) 

The  hard  numbers,  such  as  they  exist:  Last  May,  All  The  Web  surveyed  a  small  random  sample  of 

Web  pages,  and  found  that  28  percent  of  the  pages  had  at  least  one  bad  link.  On  average,  5.7  *  Did  you  miss  last  week's  Internet 

percent  of  all  of  the  links  on  all  of  the  pages  were  stale.  column?  Check  the  archive  to  stay 

up-to-date. 
In  1997,  I  performed  a  404  experiment  on  about  120  issues  of  a  topical  Net  newsletter,  dating  back 

two-and-a-half  years.  Each  newsletter  issue  had  about  30  external  links,  many  of  them  to  stories  at  news  sites,  magazines,  etc.  Of  the 
roughly  3600  links,  three-quarters  of  them  had  gone  404. 

All  kinds  of  tools  and  solutions  have  evolved  to  salve  the  problem  of  dead  links  on  the  Web.  Some  companies  offer  site  monitoring 
services  to  help  keep  Webmasters  up-to-date  on  the  status  of  their  links.  Local  tools  such  as  Coast  Webmaster  serve  the  same  end.  These 
tools  help  Webmasters  find  dead  (outbound)  links  on  the  pages  of  their  site;  other  techniques  are  available  to  help  their  servers  avoid 
issuing  404  messages  to  (inbound)  visiting  browsers. 

Some  search  engines  -  Google  was  the  first  -  offer  cached  copies  of  search  results  alongside  the  external  links,  papering  over  the 
inevitable  404  gap  resulting  from  their  robots'  revisit  schedule.  An  early  project  of  Alexa  (now  owned  by  Amazon.com)  aimed  to  save 
snapshots  of  the  entire  Web,  or  as  much  of  it  as  feasible,  and  offered  archived  pages  to  users  who  stumbled  across  404s.  (This  effort  is 
nearly  moribund  now;  the  Web's  growth  has  outpaced  it,  as  it  has  outpaced  all  efforts  at  containment  and  indexing.  The  Alexa  Internet 
Archive  now  encompasses  half  a  million  pages.  The  Web  has  over  a  billion.) 

Are  404s  really  such  a  bad  thing?  According  to  the  404  Research  Lab.  404s  are  your  friends.  The  site  tutors  Webmasters  in  techniques  for 
offering  their  own  custom  404  pages.  It  surveys  the  natural  history  of  the  404  and  provides  a  gallery  of  the  coolest,  strangest,  most  artistic, 
and  most  informative  404  pages  on  the  Web.  (Also  generously  provided  is  a  page  of  links  to  other  sites  celebrating  the  404.)  Finally,  the 
404  Research  Lab  conducts  periodic  surveys  of  its  visitors.  This  one  asked  what  people  do  upon  encountering  a  404.  The  results  (from 
nearly  3500  replies): 

37%  hit  the  back  button  and  forget  about  it 

20%  try  to  get  to  the  home  page  to  locate  the  missing  page 

3%  write  to  the  webmaster 

40%  weep  uncontrollably 

Let  me  give  the  last  word  to  some  of  the  smart  people  on  my  list. 

Ted  Byfield: 

I  think  the  better  solution  is  to  acknowledge  that  Web  pages  are  a  subspecies  of  emphemera,  and  adjust  expectations 
accordingly. 

Kragen  Sitaker: 

There  are  two  distinct  media,  both  written  in  HTML  and  served  via  HTTP. 

The  Text  Web:  Pages  like  those  on  photo.net  and  scripting.com.  consisting  mostly  of  literately  written  prose.  The 

purpose  of  the  Text  Web  pages  is  to  communicate.  Most  pages  there  have  a  very  long  lifetime. 

The  Hamsterdance  Web:  Glitzy  pages  full  of  animated  .GIFs,  funded  by  banner  ads,  with  background  music  and  video 

games  you  can  play  in  Shockwave,  with  questionnaires  asking  for  all  kinds  of  personal  information.  The  purpose  of  the 

Hamsterdance  Web  is  to  entertain.  Pages  there  tend  to  be  short-lived. 


,ass. com/printer  Jriendly?uri=/  DigitalMASS  at  Boslon.com  Monday,  February 

J126.html 
David  Weinberger: 

Pointless  insertion  of  a  palindrome:  "404!  Page  gap!  404!" 

Keith  Dawson  writes  for  the  Industry  Standard's  Media  Grot  He  was  recently  named  Internet  Journalist  of  the  Year  by  Internet  Freedom, 
a  UK-based  organization  dedicated  to  cyber-rights.  His  e-mail  address  is    daw  son  @  world,  std.  com  . 


FTC  Rounds  Up  Posse  To  Tame  The  Net 

Consumer  Protection  Division  moves 
aggressively  on  several  investigations 

By  Doug  Brown,  lnter@ctive  Week 
February  24,  2000  1:11  PM  PT 


Like  the  gunslinging  sheriffs  of  old  who  introduced  order  to  the  West,  federal 
agencies  are  increasingly  wading  into  the  digital  landscape  and  throwing 
around  their  regulatory  weight. 

As  e-commerce  has  exploded,  so  has  the  number  of  complaints  filed  against 
online  companies,  which  the  Federal  Trade  Commission  (www.ftc.gov)  is 
obliged  to  investigate.  In  1999,  for  example,  the  FTC  received  10,000 
complaints  about  online  auctions  alone.  Yet,  to  date,  federal  regulators  have 
done  little  to  stem  the  tide. 

All  that  is  changing.  The  FTC  recently  increased  its  Consumer  Protection 
Division  fivefold,  and  the  unit  is  moving  aggressively.  In  just  the  past  couple 
of  months,  the  FTC  has  announced  a  handful  of  investigations. 

»  It  is  examining  Internet  advertising  firm  Doubleclick's  practice  of 
harvesting  consumer  information. 

»  It  is  investigating  charges  that  Amazon. corn's  Alexa  Internet  division 
misled  consumers. 

»  It  is  involved  in  two  separate  investigations  of  eToys,  one  into  its  shipping 
policies  and  the  other  into  how  it  markets  videos  and  software  for  "mature" 
audiences. 

»  It  is  reportedly  looking  to  see  if  health-care  sites,  including  iVillage  and 
HealthCentral.com,  shared  in  formation  they  gathered  on  visitors  with  other 
parties. 

The  FTC  is  also  investigating  whether  online  companies  lived  up  to  their 
shipping  promises  during  the  last  holiday  season,  said  Heather  Hippsley,  an 
assistant  director  in  the  enforcement  division.  The  FTC,  she  said,  may 
choose  to  prosecute  companies  that  failed  to  meet  their  promises. 

Most  observers  said  that  any  past  inaction  on  the  part  of  the  feds  has  been 
largely  an  issue  of  resources,  not  apathy.  Only  now  are  regulators  beginning 
to  get  the  resources  they  need  to  staff  their  online  consumer-protection 
efforts. 

In  1996,  the  FTC's  Consumer  Protection  Division  devoted  14  people  —  4 
percent  of  the  division  staff  —  to  fight  cyberfraud.  In  1999,  the  cyberfraud 
staff  ballooned  to  79  people,  representing  about  23  percent  of  its  staff.  And 
according  to  the  FTC's  overview  of  its  fiscal  year  2001  budget  request,  the 
agency  could  easily  find  work  for  more  than  100  additional  staffers  in  each  of 


the  next  few  years. 

There  are  undoubtedly  many  more  investigations  under  way.  FTC 
spokeswoman  Claudia  Bourne  Farrell  said  that  the  FTC  does  not  confirm 
whether  it  is  investigating  a  company  unless  the  company  issues  its  own 
press  release  announcing  the  scrutiny. 

And  the  FTC  is  not  alone.  The  government  also  has  the  U.S.  Department  of 
Justice  (www.usdoj.  gov)  —  particularly  the  antitrust  division  —  investigating 
the  online  world.  In  addition  to  its  case  against  Microsoft,  the  DOJ 
announced  recently  that  it  is  examining  auction  site  eBay  for  possible 
anticompetitive  practices  against  other  online  auction  sites. 

But  the  FTC  still  seems  to  be  grabbing  most  of  the  headlines  these  days. 
When  told  about  the  rapid  growth  of  the  FTC's  cyberfraud  staff,  Ben 
Isaacson,  executive  director  at  the  Association  for  Interactive  Media 
(www.interactivehq.org),  which  is  the  largest  trade  organization  for  Internet 
companies,  said:  "It  sounds  like  an  Internet  company." 

Most  Internet  companies,  Isaacson  said,  "recognize  that  this  is  [the  FTC's] 
job  to  be  looking  at  these  areas.  Now  they're  being  watched,  and  they  need 
to  really  start  making  sure  that  legally,  and  as  far  as  their  customers  are 
concerned,  they  are  covered." 
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Checklist 

A  roundup  of  top  business  news  today 


!•<*  The  Human  Genome  Pro- 
ject, the  government  consortium 
working  to  decode  the  human- 
genetic  sequence,  said  it  has  de- 
ciphered uve  thirds  of  the  code. 
The  publicly  funded  Human 
Genome  Project  is  racing  Celera 
Genomics  of  Rockville  to  come  u 
with  a  complete  copy  of  the 
genome,  the  blueprint  for  human 


Cisco  Chronicle  to  the  Hearst 
Corp.,  the  owner  of  its  century- 
long  rival,  after  Hearst  agreed  to 
sell  its  flagship  San  Francisco  Ex- 
aminer to  owners  of  a  local  free- 
distribution  i 


P*  Value  America  Inc.,  the 
Charlottesville  Internet  retailer 
whose  shares  have  fallen  94  per- 
cent from  last  year's  high,  said  its 
auditors  have  "substanlial  doubt" 
about  its  ability  to  stay  in  busi- 
ness. Value  America  slock  fell  6 
cents  to  close  at  $3  50  a  share. 

V*  Crown  Central  Petroleum 
Corp.,  the  Baltimore  refiner,  re- 
ceived sweetened  buyout  propos- 
als from  Rosemore  Inc.  and  Apex 
Oil  Co.  Inc.  Rosemore,  a  Mary- 
land holding  company  that  owns 
49  percent  of  Crown's  Class  A 
common  stock,  increased  its  offer 
from  $8.35  to  $9.35  per  share. 
Apex  Oil,  a  Missouri  company 
that  owns  14.7  percent  of  Crown's 
Class  A  slock,  offered  $9.20  per 
share 

«**  U.S.  Office  Products  Co., 

the  D.C. -based  owner  of  Mail 
Boxes  Etc.,  said  it  will  cut  an 
unspecified  number  of  jobs  to  re- 
duce expenses  by  about  $5  million 
a  year. 

J-*  EntreMed  Inc.,  a  Rockville 
biotech  company,  plans  to  issue  2 
million  shares  of  common  stock  to 
raise  as  much  as  $120  million  for 
cancer-drug  research. 

i^  Mid  Atlantic  Medical  Ser- 
vices Inc.  of  Rockville  announced 
that  it  received  Virginia  reg- 
ulatory approval  lo  transfer  its 
Medicaid  business  in  that  stale  to 
Trlgon  Healthcare  Inc.  of  Rich- 
mond. About  13,000  Medicaid 
members  enrolled  in  Optimum 
Choice  Inc.,  one  of  Mid  Atlantic's 
subsidiaries,  will  be  enrolled  in 
Iiigon's  IlenlihKeepers  Plus  plan, 
effective  May  1. 


I*"*  Pulaski  Furnlti 
Pulaski,  Va.,  agreed 
management-led  buyout  offer 
worth  $65  million  The  $22.50-a- 
share  offer  was  made  by  an  in- 
vcslment  group  formed  by  Pulaski 
President  John  G  Wampler  and 
other  senior  executives,  backed  by 
an  affiliate  of  private  equity  fund 
Quad-C  Management 


\S  Carl  Icahn,  who  has  tried  to 
wresl  control  of  Nabisco  Group 
Holdings  Corp.  four  times  in  five 
years,  said  he  plans  lo  buy  a  $1.3 
billion  slake  in  the  company  and 
push  for  its  sale. 

V  The  July  3  deadline  for  US 

slock  exchanges  lo  begin  trading 
stocks  in  decimals  may  be  ex- 
tended by  a  few  months.  Securi- 
ties and  Exchange  Commission 
Chairman  Arthur  Levitt  said.  The 
Nasdaq  Slock  Market  requested 
the  delay,  although  the  New  York 
Slock  Exchange  has  said  it  is  pre- 
pared to  meet  the  deadline. 

J>"  The  Federal  Trade  Commis- 
sion opened  a  for  trial  mvcstityilion 
into  Amazon.com  Inc.'s  .AJexa, 
software  division  that  collects  in- 
formation about  how  people  use 
the  Internet 


V*  FederaJ  regulators  signed 
off  on  a  pair  of  deals  that  will  cre- 
ate two  new  wireless  competitors 
with  a  national  reach.  The  Federal 
Communications  Commission  ap- 
proved ihe  transfer  of  wireless  li- 
censes from  Be^Atlantlc_a_nd 
Vodalone  PLC  io  Cellco  Partner- 
ship, the  business  that  will  serve 
as  the  vehicle  for  the  companies' 
wireless  pannership  The  FCC 
also  allowed  Aerial  Communlca- 
tlons  Inc.  to  transfer  its  licenses 
lo  VolceStream  Wireless  Corp.,_ 
positiiiinng  that  business  lo  have  a 
major  national  presence  as  well. 

\S  Spirit  Airlines  Inc.  sued 
Northwest  Airlines  Inc.  in  federal 
court,  accusing  the  nation's  No  4 
airline  of  violating  antitrust  laws 
and  driving  the  low-fare  carrier 
out  of  some  markets 

\S  The  House  Judiciary  Com- 
mittee passed  by  26-to-2  legisla- 
tion to  allow  collective  bargaining 
for  doctors,  setting  up  a  full 
House  vote  on  the  legislation. 

V"  Fred  Moldofsky,  a  Houston 
day  trader,  was  arrested  on 
charges  that  he  violated  securities 
laws  by  posting  a  phony  press  re- 
lease on  the  Internet  Ihat  caused 
the  slock  of  Lucent  Technologies 
to  plunge  3.6  percent,  wiping  out 
$7.1  billion  of  its  value. 

U*  Cabletron  Systems  Inc. 

shares  tumbled  41  percent  on 
concern  that  the  network- 
equipment  maker's  split-up  will 
hurl  sales  and  earnings  lis  shares 
fell  $19.75  lo  $28  on  the  New  York 
Slock  Exchange. 


I-''  U.S.  investment  bank  J.P. 
Morgan  and  Co.  said  it  will  join 
an  on-line  banking  venture  led  by 
Sony  Corp.  Uiat  eventually  will  al- 


P"  Microsoft  Corp.  said  it  will 
work  with  British  Telecommunica- 
tions PLC  and  AT&T  Corp.  lo  de- 
velop high-speed  wireless  Inter- 
net software,  furthering 
Microsoft's  push  into  the  wireless 
market  Terms  weren't  disclosed. 

l^  Julian  H.  Robertson  Jr.,  a 

scion  in  financial  markets,  told  in- 
vestors dial  he  is  liquidating  the 
$6  billion  Tiger  Management  in- 
vestment funds,  calling  the  cur- 
rent market  frenzy  for  technology 
stocks  a  "Ponzi  pyramid  destined 
for  collapse." 

From  AP.  Agence  France  Presse.  Bloombefg 
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Here  are  Web  sites  lor  some 
companies  and  groups 
in  todays  section: 


■  General  Moto 
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CHECKERS  SELLS  62  STORES:  Checkers^ 
Drive-in  Restaurants  Inc.  solcf1>2        ' 
stores  in  the  Mobile,  Ala.,  West  Palm 
Beach  and  Orlando  markets  to  Titan 
Holdings  LLC  for  $10.25-million.  Ti-  < 
tan  will  operate  as  a  franchisee  and 
pay  royalties  to  the  Clearwater 
fast-food  chain,  which  intends  to  use 
proceeds  to  reduce  debt.  Titan  also 
has  agreed  to  add  29  new  Checkers 
locations  over  the  nextfive  years. 
About  half  of  Checkers'  443  locations 
are  company-owned;  the  chain  wants 
to  move  to  having  25  percent  of  its 
,  stores  company-owned  and  75  per- 
cent franchises. 

FTC  PROBES  YAHOO,  AMAZON  PRAC- 
TICES: The  Federal  Trade  Commis- 
sion has  opened  an  inquiry  into  some 
of  Yahoo  Inc.'s  and  Amazon.com 
Inc.'s  data  collection  practices.  Both 
companies  revealed  the  investiga- 
tions in  filings  with  the  Securities  and 
Exchange  Commission.  The  Amazon 
inquiry  centers  on  its  Alexa,  Internet 
software  division,  whichmonitors  In- 
ternet users  as  they  navigate  Web 
sites  to  provide  information  about 
pages  they've  visited  and  to  suggest 
related  sites.  Yahoo  said  it  believes 
the  inquiry  was  prompted  by  a  report 
issued  in  January  by  the  California 
Healthcare  Foundation,  which 
warned  consumers  that  2 1  leading 
health-related  Web  sites,  including 
Yahoo,  may  gather  personal  health 
data  without  sufficient  protection 
from  disclosure  to  other  companies 
and  without  adequate  means  for  us- 
ers to  "opt  out"  of  programs  that  dis- 
close personal  data. 

STATE  ATTORNEY  GENERAL  SUBPOENAS 
COMPUSERVE:  Florida's  attorney  gen- 
eral has  served  Internet  service  pro- 
vider CompuServe  with  a  subpoena 
stemming  from  complaints  the  com- 
pany has  been  months  late  in  paying 


rebates  on  computer  purchases.  The 
subpoena  demands  that  CompuServe 
produce  all  complaints  and  letters  re- 
ceived from  customers,  all  advertis- 
ing and  promotional  materials  about 
the  rebate  and  all  corporate  financial 
statements  for  the  past  three  years.  A 
lawsuit  was  filed  in  Fort  Lauderdale 
this  month  alleging  broken  promises 
in  the  rebate  program. 

MORGAN  TO  JOIN  SONY  ONLINE  BANK 
VENTURE:  Investment  bank  J.P.  Mor- 
gan and  Co.  said  that  it  will  join  a 
Sony  Corp.-led  online  bank  venture 
that  will  eventually  allow  customers 
to  make  transactions  through  Sony's 
PlayStation2  video  game  console.  J.P. 
Morgan  will  spend  ^14.2-million  for  a 
4  percent  stake  in  the  Sony-led 
group,  which  also  includes  Japan's 
Sakura  Bank  Ltd.  The  Internet  bank 
will  start  operations  next  year,  pend- 
ing approval  by  Japanese  financial 
regulators. . 

ONLINE  HOAX  BRINGS  FRAUD  CHARGES: 

A  Houston  man  was  arrested  on  char- 
ges that  he  violated  securities  laws  by 
posting  a  phony  press  release  on  the 
Internet  that  caused  the  stock  of  Lu- 
cent Technologies  to  plunge  in  value. 
Manhattan  prosecutors  accused  Fred 
Moldofsky,  43,  of  causing  the  value  of 
the  stock  in  the  world's  top  manufac- 
turer of  communications  equipment 
to  fall  as  much  as  3.6  percent,  trim- 
ming the  value  of  the  company  by 
$7.1-billion.  Prosecutors  say  he 
posted  the  phony  earnings  warning 
on  March  22  in  the  form  of  a  press  re- 
lease and,  on  the  same  day,  traded 
6,000  shares  of  the  company's  stock. 

INSURERS  DISCUSS  WEB  VENTURE:  Six 

insurance  companies  are  discussing 
an  alliance  to  build  their  own  Internet 
site  to  process  claims.  The  venture, 
tentatively  called  MedUnite,  would 


link  doctors  and  hospitals  with  insur- 
ance companies  through  the  Inter- 
net. The  effort  by  Aetna  U.S.  Health- 
care, Cigna,  WeilPoint  Health 
Systems,  Oxford  Health  Plans,  Foun- 
dation Health  Systems  and  Pacifi- 
Care Health  Systems  could  pose  a 
threat  to  companies  such  as  Heal- 
theon/WebMD,  which  is  trying  to"- 
link  doctors,  insurance  companies 
and  patients  using  the  Internet. 
Shares  of  Healtheon/WebMD  closed 
at  $25.82,  down  $4.86. 

MCDONALD'S  TO  EXPAND  NON-BURGER 
STORES:  McDonald's  Corp.  is  plan- 
ning to  increase  the  number  of  its 
non-hamburger  restaurants  this  year. 
McDonald's  will  open  160  to  180  new 
restaurants  under  its  Chipotle  Mexi- 
can Grill,  Donatos  Pizza  and  London- 
based  Aroma  Cafe  brands. 
McDonald's  also  plans  to  add  be- 
tween 1,800  to  1,900  hamburger  res- 
taurants this  year,  with  90  percent  of 
the  expansion  taking  place  outside 
the  United  States. 


Earnings 


Davel  Communications  Inc. 

The  Tampa  pay  phone  provider  re- 
ported continued  losses  because  of 
competition  from  wireless  phones. 
Davel  also  apologized  for  a  printer's 
error  in  its  preliminary  10-K  filing, 
which  contained  inaccurate  financial 
charts. 

4thQtr  Year  Ago 

Revenue       $39.4-mi!       $40-mil 
Net  Income  -$8.4-mil       -$53.6-mil 
Per  Share      -77  cents       -$5.57     - 

Year  Year  Ago 

Revenue       $175.8-mil     $194.8-mil 
Net  Income   -$78.7-mil      -$66.9-mil     /  ■ 
Per  Share      -$7.40  -$7.59  lj 
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■  bice.com  Ranks  in  The  Top  1 0 
Most  Visited  !T  Job  Sites 

EarthWeb's  dice.com  (www.dice.com),  a 
nationwide  job  site  for  information  technolo- 
gy (IT)  professionals  and  the  site  that  delivers 
jobs  to  the  MicroTimes.com  database,  says 
its  IT  job  postings  have  grown  to  more  than 
175,000.  The  company  also  says  Media 
Metrix  and  Alexa  Internet,  independent 
research  firms  that  measure  Internet  audience 
usage  and  behavior,  ranked  dice.com  as  one 
of  the  top  1 0  most  visited  Web  sites  in  the 
online  recruiting  sector,  and  the  leading  job 
board  for  IT  professionals  during  1999. 
Dice.com  also  says  its  customer  base  for 
paid  job  listings  has  now  grown  to  more  than 
5,400  customers.  /7 
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A  STAKE  IN  OTHER  DOT-COMS 


Aniaion.com  operations  ... 

■  Alexa  Internet  (Web  tracking  and  recommenda- 
tion site) 

■  Amazon. com  Anywhere  (Web  site  for  wireless 
phones,  hand-held  units  and  other  non-desktop 
devices) 

■  Back  to  Basics  Toys 

■  IMDb  Internet  Movie  Database,  UK 

■  Junglee  (online  comparison  shopping  services) 

■  LiveBid  Auctions 

■  PlanetAII  (online  address  book,  calendar  and  reminder  service) 

■  Tool  Crib  of  the  North  (tools  and  equipment) 

...  and  investments  (with  percent  owned  by  Amazon.com) 

■  Ashfoid.com  ( 1 6%;  luxury  goods) 

■  Audible.com  (5%;  audio  Web 
site) 

«  Delia  &  James  (20%;  online  wed- 
ding gift  registry) 

■  Di  ugstoi  e  com  (28%) 

■  Gear.com  (49%;  closeout  sport- 
ing goods) 

■  .Greenlight.com  (5%;  online  car- 
buying  company) 

■  HomeGiocer.com  (28%) 

■  Kozmo.com  (32%;  online  deliv- 
ery service) 

■  Living  com  ( 1 8%;  home  furnish- 
ings) 

H  Pets.com  (50%;  pet  supply  store) 

■I  Sotl.ebys.Amnzon.com  (collectibles,  auctions) 

Source:  Hoover's 
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Serendipity  Rules  Along  Byways 
To  Facts,  Companionship  on  Web 

By  Jeremy  Wagstaff 


STRIPPED  OF  HYPE,  the  Internet  is 
about  two  things:  information 
and  communication.  It's  about  finding 
things  you  need  and  it's  about  com- 
municating with  others.  But  perhaps 
the  most  rewarding  part  of  it  is  the 
serendipity  of  it  all:  the  chance  hook- 
up with  people  you  weren't  looking 
for,  the  chance  discovery  of  things  you 
didn't  know  existed.  And  the  Web,  be- 
ing the  Web,  is  fostering  plenty  of 
tools  to  help  you  do  just  that. 

Take  information  gathering,  for  ex- 
ample. Unless  you're  a  brave  explorer 
with  time  on  your  hands,  chances  are 
you'll  be  visiting  Web  sites  where  you 
know  your  way  around  already.  In- 
deed, without  an  address  to  tap  into  the 
browser,  you're  stuck.  That's  why  Ya- 
hoo, for  example,  has  remained  one  of 
the  most  popular  Web  sites  since  its 
launch  in  1995.  The  result:  There's  a 
kind  of  highway  of  big  sites- Yahoo, 
CNN,  Altavlsta-that  everyone  visits, 
while  many  of  the  byways  get  ignored.  _ 
So  how  can  you  find  the  byways  without 
getting  lost  and  wasting  time? 

There's  a  number  of  small,  mostly 
free,  programs  you  can  try.  These  pig- 
gyback on  your  existing  Explorer  or 
Netscape  browser  to  act  as  independent 
agents  gathering  data  relevant  to  what 
you're  looking  at  in  your  browser.  One 
is  Alexa_jwww.alexa.com),  a  browser 
plug-in  that  provides  on-the-spot  infor- 
mation about  sites  and  products  as  you 
browse.  Alexa  has  been  around  for  at 
least  twoyears,  but  it's  only  since  its  ac- 
quisition by  online  bookseller  Ama- 
zon.com that  it's  started  to  prove  its 
worth.  Load  the  free  software  and 
you'll  see  a  bar  that  appears  either  to 
the  left  of  your  browser  or  below  it. 

I  FORMATION  WILL  APPEAR  in  the 
bar  about  a  given  site,  including  the 
address  and  telephone  number  of  the 
company  that  owns  it.  (Not  always  the 
kind  of  information  you  find  on  a  com- 
pany homepage.)  Also  listed  are  sev- 
eral sites  with  related  themes:  Alexa 
even  allows  users  to  add  their  own. 
Visit  the  Alexa  homepage,  for  in- 
stance, and  the  Alexa  bar,  bafflingly 
enough,  offers  a  link  to  Privacy  Inter- 
national, a  London-based  watchdog  on 
surveillance  by  governments  and  cor- 
porations. Follow  that  link  and  you're 
already  off  the  beaten  track. 

Another  tool  is  Flyswat  (www. fly- 
swat,  com) ,  a  program  with  similar  pre- 
tensions and  a  rather  different  ap- 
proach. Once  the  software  is  loaded  you 
won't  be  aware  of  its  presence  save  for 
a  small  toolbar  at  the  top  of  your 
browser-a  fly  in  the  system  tray,  so  to 
speak.  When  you  load  a  Web  page  with 
any  text  in  it,  chances  are  you'll  see 
some  of  the  words  underlined  in  yellow 
(not  to  be  confused  with  the  blue,  un- 
derlined text  that  usually  indicates  a 


hyperlink)  .Click  once  on  this  text  and  a 
small  window  will  appear  with  a  range 
of  links  to  pertinent  information:  If  the 
word  is  a  place,  Chicago,  say,  it  will 
have  links  to  travel  guides ;  if  it's  a  ma- 
jor company,  it'll  have  a  checklist  of 
useful  links,  such  as  one  to  the  com- 
pany's U.S.  Securities  and  Exchange 
Commission  filings. 

Both  these  programs  are  fairly  use- 
ful. And  there  are  others:  neoButler 
(www.neobutler.com),  for  example, 
tracks  your  browsing  habits,  sends  you 
e-mails  suggesting  similar  Web  sites 
and  stores  pages  you  visit  for  quick  re- 
call. But  none  of  these  search  tools  of- 
fers the  opportunity  for  that  chance 
meeting  with  another  wandering  Inter- 
net soul,  who  may  provide  valuable  in- 
formation you  may  have  wasted  hours 
trying  to  find  yourself.  This  is  where  so- 
called  browser  companions  such  as 
uTok  and  ThirdVoice  come  in.  Both  are 
widgets  that  turn  a  Web  site  into  a  cross 
between  a  church  bulletin  board  and  a 
blank  wall  in  a  public  restroom. 

ThirdVoice'  (www.thirdvoice.com) 
has  already  made  waves  with  a  pro- 
gram that  allows  users  to  post  invisi- 
ble notes  to  any  Web  site  they  visit. 
Anyone  else  with  the  same  software 
can  reacfthose  notes.  UTok  (short  for 
Users'  Tree  of  Knowledge)  does  much 
the  same  thing,  but  the  notes  will  ap- 
pear as  an  adjunct  to  the  program's 
own  window,  not  on  the  Web  page  it- 
self. (UTok  can  be  downloaded  from 
www.utok.com.)  _,.., ."  i      .   - 

THIRDVOICFS  WEB  SITE  an- 
nounced plans  to  release  a  com- 
plete overhaul  of  the  software  next 
month  that  will,  apparently,  combine 
its  existing  functions  with  those  of 
companions  like  Flyswat  and  Alexa. 

None  of  these  programs  involve  di- 
rect chat  (software  that  allows  users 
to  type  messages  to  each  other  and  re- 
act instantaneously).  For  that. you 
need  to  download  programs  like  Gooey 
(www.gooey.com)  or  Instant  Ren- 
dezvous from  Multimate.net  (www.ge- 
tir.com). 

UTok  is  particularly  useful.  Type  in 
Indonesia,  for  example,  and  you  get 
an  impressive  list  of  quite  interesting 
comments  about  the  country  and -its 
recent  withdrawal  from  East  Timor. 
Post  your  own  comment  to  a  site,  and 
if  you  chose  not  to  do  it  anonymously,; 
any  subsequent  comments  will  be  for- 
warded to  you.  "'.-■; 

These  programs  only  hint  at  the  pos- 1 
sibilities  of  the  Web  for  bringing  people ' 
closer  to  information  and  to  each  other. 
They  remain  somewhat  fiddly  and  un- 
stable. For  now,  this  prevents  them 
from  reaching  their  goals  of  uniting 
people  with  similar  interests,  claims  to 
the  contrary  notwithstanding. 
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Power 
searching 
on  the 
Internet 

By  Jim  Edwards 


Oearch  engines,  those  handy 

sues  milling  the  million*  of  Web 
siie^;  on  the  lniemct,  present  a  dou- 
ble-edged sword  for  any  surfer  trying 
to  find  specific  information  on  vari- 
ous topics.  On  one  side,  you  know 
the-  information  \ou  want  lies  out 
there  somewhere.  On  the  other,  you 
don't  know  how  to  get  it. 

Everyone  knows  the  frustration  of 
typing  keyword,  mIic  topic  of  your 
van.li)  mil)  die  search  engine,  clicking 
the  search  button,  and  tlien  facing  the 
prospect  of  wading  through  up  to  a 
million  sites  to  find  what  you  wanL 
For  anyone  experiencing  liiis  frustra- 
tion, here  are  some  suggestions  should 
drastically  improve  your  search  results 

Boolean  search-Suppose  you 
wanted  information  regarding  real 
estate  agents  here  in  Williamsburg. 
Most  people  would  search  this  sub- 
ject b\  going  to  a  search  engine  and 
nping  in  Willi, limbing  real  estate 
agent.  The  search  engine  would 
liopelullv  rcunn  irsnits  lor  sites  that 
matched  those  keywords. 

However,  search  engines  also  typ- 
ically return  results  including  sites 
containing  only  u>mt>  of  die  words  in 
your  search.  In  this  example,  you 
might  get  sites  about  Realtors,  but 
also  sites  on  local  insurance  agents, 
taJcni  agents  and  advertising  agents 

To  make  searching  more  efficient, 
most  search  engines  allow  sutlers  to 
perform  "Boolean"  searches.  This 
feature  narrows  die  results  to  only 
Uiose  Web  sites  containing  the  exact 
words  specified    Ihose  seajchinp  for 
vwlliimr.lHjir  real  estate  agents 
would  t-nin  W  ihunish  utg'  A  M  >  iv.il 
AND  esuiie  AND  agents  into  the 

Quote  morks-Brackeling  key- 
words will)  quotation  marks  yields 
even  more  specific  results.  "Wil- 
liamsburg real  estate  agent"  should 
produconl)  those  Web  sites  con- 
taining tins  exact  phrase  somewhere 
in  die  site. 

Capitalixaf  ion-Deneniling  on 


lcngtn 


also 


1  factor  in  results. 


play,  as-gmti 

tapiuli/.tng  proper  names  wiiue  leav- 
ing other  wotds  m  lower  case  helps 
define  a  search.  However,  you  should 
almost  never  enicr  your  search  lenns  in 
all  capital  letters. 

If  refining  yow  searches  doesn't  get 
you  where  you  want  to  go.  several  pro- 
gnuns  exist  in  help  you  search  more 
quickly  and  effectively  Copemic 
(wwwenpemic  corn)  ex;unines  multi- 
ple se;uch  engines  then  compares  each 
engui'.-'s  result:-;  aiMinsi  (lie  rest  to 
dctennme  the  hesi  sites  The  piogram 
then  ranks  the  resiiliing  sites  and  dr. 
plays  Uiem  lor  tlic  user  Copcrnic's  free 
version  allows  users  unlimited  searches 
fin-  Web  sites.  You  can  upgrade  the 
program  for  a  fee  to  include  swirches 
for  music,  books  and  more. 

Alexa  (wwwalexa.com)  lets  you 
find  oui  a  lot  of  information  about 
sites  once  you  visit  them.  AJexa  will 
show  you  the  last  time  a  site  was 
undated,  its  popularity,  and  provide 
links  to  related  sites  This  free  pro- 
gram allows  you  to  search  on  the  fly 
as  you  surf  to  find  more  and  more 
specific  information. 

With  the  addition  ol  hundreds  of 
thousands  of  Web  pages  every  week, 
the  Internet  gels  more  confusing  with 
each  passing  moment  Honing  your 
search  skills  represents  one  ot  the 
smartest  investments  of  time  and 
energy  any  serious  suilei  can  make.  D 
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DENIAL    OF    SERVICE:    WE'RE    ALL    RESPONS 


NEWS  SPECIAL 


WEB  UNDER  ATTACK 


IN  MANY  RESPECTS,  FEBRUARY  7  marked  a  big  change  in 
the  way  we  looked  at  e-business  and  at  the  Web  in  gener- 
al. That  was  the  day  someone — still  unknown  as  of  this 
writing — succeeded  in  shutting  down  Yahoo!  for  several 
hours  with  what's  known  as  a  "denial-of-service"  attack 
(DoS  attack).  The  following  day,  several  more  sites  in- 
cluding Amazon.com,  Buy.com,  CNN,  and  eBay  went 
down.  Then  it  was  Datek,  ETrade, 
ZDNet  (including  www.pcmag.com), 
and  more. 

In  denial-of-service  attacks,  one  or 
more  computers  flood  a  Web  site  | 

with  requests  for  data.  In  these  recent    !■ 
cases,  many  systems  must  have  been  send-    | 
ing  millions  of  requests,  overloading  the 
servers — and  the  connections  leading  to    •' 
them— and  not  letting  anyone  else  in.  DoS    jj! 
attacks  are  normally  rather  straightforward, 
and  usually  big  Web  sites  can  deal  with 
:hem,  but  this  time,  the  requests  appar 
ently  came  from  countless  IP  address 
es,  many  of  them  bogus. 

The  good  news  is  that  by  themselves,  denial-of-service 
attacks  don't  threaten  the  data  on  a  server,  so  financial 
records  remain  secure,  and  no  one's  privacy  or  personal 
information  is  compromised.  The  bad  news:  People  can't 
reach  the  sites  they  need  to  reach,  and  the  sites  can't  do  the 
business  they  need  to  do. 

This  time  around,  the  long-term  damage  was  probably 


BLE 

minimal,  but  the  attacks  point  out  how  dependent  most  of 
us  have  become  on  big  Web  sites  and  how  vulnerable  even 
the  biggest,  best,  and  most  secure  sites  seem  to  be. 

So  what  do  we  do  now?  We  must  redouble  our  efforts  to 
keep  our  sites  secure  and  reliable.  (Next  issue,  we'll  have 
a  story  on  high-availability  tools,  such  as  load  balancers 
and  server  clusters.)  But  that  alone  isn't  enough. 

Big  sites,  software  and  hard- 
ware vendors,  and  ISPs  must  work 
together  more  closely  to  prevent 
such  attacks.  You  can  do  your 
part,  too.  Any  enterprise  or  organization 
with  high-speed  connections  to  the  Inter- 
net has  a  responsibility  to  make  sure  that 
j  its  computers  can't  be  used  as  part  of  a 
DoS  attack.  Victims  of  an  attack  need  to 
know  how  to  organize  a  co- 
ordinated response.  The 
CERT  Coordination  Center 
at  Carnegie  Mellon  Univer- 
cert.org)  has  good  recommen- 
dations and  procedures  for  preventing  a 
take  over  and  for  countering  a  DoS  attack.  You  can  also  en- 
sure that  you  have  the  latest  security  patches,  adequate 
firewalls,  and  rock-solid  password  and  user-rights  policies, 
thus  ensuring  that  your  equipment  can't  be  compromised 
for  nefarious  purposes.  In  short,  all  of  us  need  to  take  a 
good,  long  look  at  everything  we're  doing  in  our  business- 
es and  realize  where  we  are  vulnerable. 


THE    SHOW    MUST    GO    ON 

IN  THE  PAST  FEW  WEEKS,  I've  been  at  Showcase  and  Demo 
2000,  two  industry  conferences  that  debut  new  computing 
products.  Seeing  how  these  shows  have  changed  over  the 
years  is  amazing.  Once  upon  a  time,  the  focus  was  on  new 
desktop  applications;  now  90  percent  of  the  products 
shown  are  either  new  Internet  services  for  consumers  or 
new  ways  for  companies  to  build,  expand,  or  maintain 
their  Web  sites. 

Today,  there's  an  online  service  for  just  about  any  busi- 
ness you  can  name,  but  there  are  still  lots  of  good  new 
ideas  out  there.  This  year,  many  are  aimed  at  the  explod- 
ing business-to-business  market.  There  are  new  tools  de- 
signed to  make  getting  your  site  up,  adding  features  to  ex- 
isting sites,  or  connecting  to  other  people's  businesses 


easier.  Some  are  very  expensive,  but  there  are  some  you 
can  add  to  your  site  for  almost  nothing. 

The  sheer  number  of  new  services  can  be  overwhelm- 
ing. I  was  troubled  by  the  assumption  many  of  the  compa- 
nies are  making  that  they  have  to  create  products  as  fast  as 
possible,  get  customers  immediately,  and  go  public  within 
a  year — or  else  go  out  of  business  and  try  again.  Some- 
times that  works,  but  surely  that  can't  be  the  right  business 
model  for  all  of  these  products  and  services.  What  I  some- 
times see  is  good  ideas  that  aren't  completely  finished.  As 
someone  remarked  to  me  at  Showcase:  Five  years  ago,  peo- 
ple had  to  have  good  companies  in  mind  to  get  funded. 
Two  years  ago,  they  needed  new  products.  Now,  all  they 
need  is  an  interesting  feature. 
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Forward  Thinking 

MICHAEL    J.    MILLER 


WHATEVER    HAPPENED    TO    J 

REMEMBER  WHEN  a  plain  old  browser  was  enough?  Then 
along  came  plug-ins,  which  often  morphed  into  applica- 
tions of  their  own  such  as  RealPlayer  or  Shockwave.  Then 
came  instant-messaging  clients,  such  as  AOL  Instant  Mes- 
senger or  ICQ,  Then  we  started  seeing  things  like  the  Alexa 


toolbar  (which  listed  sites  related  to  the  one  you  were 
viewing),  all  sorts  of  little  pop-up  applications,  and  stand- 
alone shopping  bots. 

The  newest  trend  is  to  try  to  combine  as  many  of  these 
features  as  possible  into  one  tool  that  combines  browsing, 
shopping,  and  communications.  Some  are  quite  intriguing. 

Third  Voice,  which  made  a  name  for  itself  by  letting 
users  annotate  other  people's  sites,  now  appears  off  in  a 
window  on  the  side  of  a  Web  page.  In  addition  to  letting 
its  users  post  comments  on  the  pages,  it  adds  links  to  the 
words  on  the  page  and  shows  how  those  links  connect  to 
other  sites.  This  is  a  neat  idea;  the  twist  is  that  many  of  the 
links  seem  to  emphasize  opportunities  to  shop  at  other 
sites.  Some  will  say  that  Third  Voice  has  gone  from  being 
subversive  to  capitalist,  but  that's  what  the  Internet  mar- 
ket seems  to  be  about  these  days. 

In  a  similar  vein,  uTOK  (Users'  Tree  of  Knowledge)  lets 
you  set  up  another  window  next  to  a  page  and  share  your 
ideas  about  the  page.  The  idea  here  is  that  everyone  is  an 
expert  on  something;  users  rate  the  people  making  com- 
ments, and  only  those  with  high  ratings  survive.  This  is  the 
theory  of  evolution  in  action. 

Firetalk  gathers  comments  in  a  different  way,  combining 
instant  messaging  with  voice  communications.  Through  a 
Firetalk  window,  you  can  do  Voice  over  IP  for  free,  as  well 
as  instant  messaging,  text,  and  even  conference  calls.  It's  a 
cool  idea. 

Programs  that  attach  toolbars  to  the  browser  itself  are 


UST    PLAIN    BROWSING? 

also  popular.  eBoodle  is  a  compar- 
|  ison-shopping  engine  that  runs  on 
the  bottom  of  the  screen,  offering 
links  to  shopping  and  a  way  to 
manage  the  shopping  you've  done. 
NetSanity  gathers  small  bits  of  in- 
formation from  the  sites  you  like, 
lets  you  search,  organizes  your  fa- 
vorite links,  and  offers  shopping 
from  the  toolbar.  Products  like  fly- 
swat  and  GuruNet  let  you  find 
more  information  about  what- 
ever's  on  your  screen. 

One  of  my  favorite  concepts  is 
from  Autonomy,  which  showed  a 
new  service  called  Kenjin.  It 
claims  to  analyze  the  content  of 
whatever  you're  viewing — Web 
pages,  e-mails,  or  other  documents — and  then  show  you 
related  data  from  the  Web  or  from  information  on  your 
hard  disk.  This  is  something  of  a  cross  between  Alexa  and 
the  Web  information  management  products  we  review 
later  in  this  issue  (page  126). 

All  of  these  are  interesting  and  useful  tools,  but  in  some 
respects,  they  seem  like  overkill.  After  all,  how  many  dif- 
ferent toolbars  and  windows  do  you  want  on  your  screen? 
In  the  end,  most  of  these  features  will  just  get  built  into 
browser  or  instant-messaging  products.  Why?  Because 
most  people  want  one  toolbar  or  window  that  does  every- 
thing. It  has  to  be  something  that  we  can  control,  some- 
thing that  gathers  information  from  all  sites  on  the  Web 
(not  just  those  that  swing  deals  with  the  vendor)  and  pro- 
tects our  privacy.  That's  a  tall  order. 


GADGET    OF    THE    MONTH... 

EVERYONE  LOVES  A  NEAT  NEW  GADGET, 
and  at  PC  Magazine  Labs,  we  have  the  op- 
portunity to  play  with  lots  of  them.  Late- 
ly, the  Labs  are  overflowing  with  thin 
clients  and  Internet  appliances.  You'll 
see  our  test  results  in  the  next  couple 
of  issues. 

The  gadget  that's  been  drawing  the 
most  attention  lately  is  the  new  Palm 
IIIc,  the  first  color  Palm  device.  I've 
been  carrying  one  everywhere,  and 
I  like  it.  The  IIIc  really  isn't  all  that 


...AND    A    NEAT    ADD-ON    TO 

THE  OTHER  COOL  GADGET  everyone  wants  these  days  is  a 
digital  camera.  One  of  the  best  I've  seen  lately  is  the  new 
Kodak  PalmPix,  a  tiny  little  camera  that  attaches  to  the  bot- 
tom of  a  Palm  III  or  VII  and  lets  you  take  pictures,  store 
them  on  your  Palm,  and  then  move  them  back  to  your  PC 
later  via  the  syncing  cradle. 

What  makes  it  particularly  compelling  is  that  the  im- 


much  of  a  departure;  it's  pretty  much  a  Palm  III  with  a 
color  screen.  It's  not  the  first  color  PDA;  Casio  has  been 
shipping  a  color  Windows  CE-based  PDA  for  almost  a  year. 
So  why  is  the  IIIc  cool?  Because  the  screen  is  not  only  color 
but  also  much  clearer  and  brighter  than  those  of  earlier 
Palm  devices,  and  because  you  get  color  without  sacrific- 
ing too  much  battery  life. 

Earlier  Palm  Ills  used  normal  double-A  batteries,  but  the 
IIIc  is  more  like  the  Palm  V  because  it  charges  while  in  the 
syncing  cradle.  I  carried  one  without  the  cradle  (but  with 
a  cable  for  syncing)  for  over  a  week  and  still  had  battery 
life  to  spare. 

IT 

ages  are  decent,  with 
VGA  resolution  and  16 
bits  of  color  or  gray 
scale.  The  PalmPix 
won't  be  out  for  anoth- 
er month  or  so,  but  I  tried  one  recently,  and 
it  was  great  fun. 
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COVER  STORY 

It's  Time  for  Rules  in  Wonderland 

Here's  Business  Week's  four-point  plan  to  solve  the  Internet  privacy  mess 

If  Lewis  Carroll  had  written  about  Alice's  adventures  today,  she  would  find  herself  passing 
through  the  looking  glass  and  into  cyberspace.  She  would  meet  up  with  dodos,  duchesses,  and 
eggheads,  some  of  whom  would  spout  the  rough  equivalent  of  "Twas  brillig,  and  the  slithy 
toves...."  The  journey  also  would  be  full  of  rude  surprises.  As  in  Carroll's  books,  she  would 
eventually  discover  who  she  really  was.  But  many  others  she  had  never  met  would  learn  about 
her,  too.  Indeed,  with  every  click  of  the  mouse,  a  bit  more  of  her  privacy  would  vanish  down  the 
rabbit  hole. 

These  days,  a  lot  of  people  are  stumbling  on  similar  unpleasant  surprises.  Thanks  to  a  string  of 
privacy  gaffes  involving  DoubleClick  (DCLK),  RealNetworks  (RNWK),  Amazon.com  (AMZN), 
and  other  major  Web  sites,  consumers  are  learning  that  e-commerce  companies  have  an  intense 
interest  in  their  private  information.  For  about  9  cents,  some  medical  data  sites  will  sell  you  your 
neighbor's  history  of  urinary  tract  infections.  Your  speeding  tickets,  bounced  checks,  and 
delayed  child-support  payments  are  an  open  book.  In  the  background,  advertising  services  are 
building  profiles  of  where  people  browse,  what  they  buy,  how  they  think,  and  who  they  are. 
Hundreds  of  sites  already  are  stockpiling  this  type  of  information-some  to  use  in  targeted 
i  advertising,  others  to  sell  or  trade  with  other  sites. 

GOLD  RUSH.  It  will  get  worse.  The  tricks  being  played  today  are  child's  play  compared  with 
what's  coming.  Web  sites  that  want  to  know  you  better  will  soon  be  able  to  track  your 
movements  on  Web  phones,  palm  devices,  and  video  games,  and  parse  the  data  with  more  subtle 
software.  Online  services  can  be  layered  with  mounds  of  data  about  each  person.  Interactive 
TVs,  for  instance,  have  the  potential  to  correlate  the  Web  sites  you  visit  at  work  with  the  ads  you 
see  at  home  in  the  evening. 

Web  surfers  don't  need  extra  proof  that  this  gold  rush  for  personal  data  is  alarming.  In  a  new 
Business  Week/Harris  Poll  (page  96),  92%  of  Net  users  expressed  discomfort  about  Web  sites 
sharing  personal  information  with  other  sites.  The  public  outcry  has  grown  so  loud  that  in 
February,  search  engine  AltaVista  Co.  promised  to  ask  explicit  permission  before  sharing 
visitors'  personal  information  with  other  companies.  On  Mar.  2,  DoubleClick  bowed  to  public 
pressure  on  a  similar  point:  The  company,  which  serves  up  ads  on  many  Web  sites,  has  created 
anonymous  digital  snapshots,  or  "profiles,"  of  millions  of  cybersurfers,  based  on  where  they 
browse  and  what  they  do  online.  DoubleClick  had  planned  to  link  profiles  with  much  more 
specific  information,  including  names  and  addresses  culled  from  real-world  databases  that  cover 
90%  of  American  households.  The  company  dropped  that  controversial  plan,  and  within  days, 
smaller  rival  24/7  Media  Inc.  abandoned  a  similar  strategy. 

Anonymous  tracking  and  profiling  by  DoubleClick  and  24/7  can  be  very  subtle.  But  sometimes 
privacy  violations  hit  you  in  the  face.  We  have  all  heard  the  examples  of  sociopaths  who  stalk 
their  victims  online.  We  have  seen  the  statistics  on  "identity  theft,"  in  which  criminals  suck 
enough  personal  data  off  the  Net  to  impersonate  other  people.  Perhaps  these  are  extreme 
examples.  Even  without  them,  many  cybersurfers  are  starting  to  feel  that  they  have  spent  quite 
enough  time  at  this  particular  Mad  Tea  Party.  They  are  ready  for  privacy  rules  that  set  some 
kplain  and  simple  boundaries.  In  the  March  Business  Week/Harris  Poll,  57%  of  respondents  said 
government  should  pass  laws  on  how  personal  information  is  collected.  "What's  going  on  today 
is  exponentially  more  threatening  to  those  who  want  to  protect  privacy,"  says  Eliot  Spitzer,  New 
York's  state  attorney  general  who  has  proposed  privacy  legislation.  People  can't  make  informed 
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decisions  on  the  Net  because  they  lack  the  necessary  information.  "What  we're  confronting  is  a 
market  failure,"  says  Spitzer. 

•  Responding  to  a  growing  chorus  of  privacy-related  complaints,  some  states  have  drafted 
legislation  ranging  from  curtailing  the  sale  of  personal  information  to  the  creation  of  a  privacy 
ombudsman.  But  this  piecemeal,  state-by-state  approach  is  a  muddle.  Scattershot  laws  will  only 
create  more  confusion.  Over  time,  they  will  choke  budding  e-business  in  complex  litigation  and 
red  tape. 

Business  Week  believes  there  is  a  better  way.  Instead  of  a  conflicting  patchwork  of  state  rules, 
the  federal  government  should  adopt  clear  privacy  standards  in  the  spirit  of  the  Fair  Information 
Practices-a  philosophical  framework  for  privacy  protection  that  has  been  adopted  worldwide 
over  the  past  25  years.  The  broad  principles  are  essential: 

-  Companies  conducting  business  online  should  be  required  by  law  to  disclose  clearly  how  they 
collect  and  use  information. 

-  Consumers  must  be  given  control  of  how  their  data  are  used. 

-  Web  surfers  should  also  have  the  ability  to  inspect  that  data  and  to  correct  any  errors  they 
discover. 

-  And  when  companies  break  the  rules,  the  government  must  have  the  power  to  impose 
penalties.  "All  of  these  bits  you  are  sending  out  are  your  digital  DNA,"  says  Tara  Lemmey, 
president  of  the  Electronic  Frontier  Foundation.  "You  should  have  control  of  that." 

Regulation  flies  in  the  face  of  the  approach  industry  has  been  championing.  For  the  past  four 
years,  Net  companies  have  insisted  that  they  can  police  themselves  on  privacy.  "Industry 
initiatives  and  market  forces  are  already  doing  a  good  job,"  says  Daniel  J.  Jaye,  co-founder  of 
Engage  Technologies  Inc.,  which  dishes  up  ads  on  the  Web. 

•In  other  words,  the  market  will  punish  companies  that  fall  afoul  of  consumers.  Bringing  in  the 
government,  execs  say,  will  pile  bureaucratic  layers  on  top  of  the  Net.  This  could  undercut  the 
very  promise  of  efficiency  that  many  online  businesses  are  counting  on.  The  Internet,  they  say,  is 
supposed  to  draw  companies  closer  to  their  customers,  allowing  them  to  anticipate  their  desires. 
With  profile  data,  they  can  target  their  ads,  slash  wasteful  and  random  marketing  costs,  design 
products  faster,  and  build  higher  profit  margins.  Profiling  provides  the  underpinnings  of  a  new 
way  of  doing  business  upon  which  the  Net  Economy  is  built. 

Laws  that  require  businesses  to  seek  users'  permission  before  they  collect  or  use  data  about 
Web-surfing  habits  could  kill  this  goose,  they  say.  And  why  do  that,  industry  execs  ask,  when 
they  are  making  such  fine  strides  in  protecting  consumer  privacy?  As  a  positive  sign,  Net 
businesses  trumpet  a  May,  1999,  Federal  Trade  Commission  survey  in  which  66%  of  companies 
queried  had  privacy  policies. 

SELF-REGULATORY  SHAM.  We  are  not  persuaded  by  these  arguments.  Few  Web  sites 
give  consumers  real  choices  over  the  data  that  get  collected  online.  There  is  no  proof  that  if 
given  a  choice— especially  bolstered  with  financial  incentives  proffered  by  Web 
merchants-consumers  won't  willingly  hand  over  some  personal  data.  As  for  privacy  policies,  the 
same  FTC  survey  showed  that  while  more  than  90%  of  companies  polled  collected  personal 
information,  fewer  than  10%  actually  followed  all  of  the  established  Fair  Information  Practices. 

In  short,  self-regulation  is  a  sham.  The  policies  that  companies  have  posted  under  pressure  from 
the  government  are  as  vague  and  confusing  as  anything  Lewis  Carroll  could  have  dreamed  up. 
One  simple  example:  When  people  register  at  Yahoo!  Inc.  (YHOO)  for  one  of  its  services,  such 
as  My  Yahoo,  they  are  asked  to  provide  their  birth  date  and  e-mail  address-ostensibly  as  a 
safeguard  if  they  forget  their  user  name  and  need  prompting.  But  Yahoo  also  uses  that 
information  for  a  service  called  the  Birthday  Club,  sending  product  offers  from  three  to  five 
^^merchants  to  users  via  e-mail  on  their  birthday. 

Don't  look  for  transparency  here.  Most  sites  don't  limit  how  they  or  their  partners  use  consumer 
information.  And  Web  sites  can  transfer  information  to  partners  without  telling  their  own 
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customers.  Many  sites  also  change  their  practices  at  will  and  without  warning. 

Because  privacy  breaches  are  so  corrosive  to  consumer  trust,  some  Web  execs  actually  welcome 
l  broad  national  standards.  IBM  (IBM)  and  Walt  Disney  Co.  (PIS)  have  decided  not  to  advertise 
f  on  Web  sites  that  don't  have  privacy  policies.  Privacy  codes  must  be  clearer,  says  Chris  Larsen, 

CEO  and  founder  of  E-Loan  Inc.  (EELN),  an  online  loan  service  that  has  its  privacy  policies 

audited.  "I  think  the  industry  has  squandered  the  opportunity  to  take  care  of  this  on  its  own." 

IBM  Chairman  Louis  Gerstner  doesn't  go  that  far.  But  he  has  warned  Net  executives  that  they 

must  get  serious.  "I  am  troubled,  very  troubled,  by  leaders  who  have  failed  to  recognize  our 

responsibility  in  the  transformation  of  the  new  economy,"  he  says. 

We  hope  other  Web  execs  are  listening  closely.  The  policies  we  propose  are  in  the  best  interests 
of  Web  businesses.  If  more  consumers  can  be  assured  that  their  personal  information  is  safe, 
more  of  them  will  flock  to  the  Net— and  click,  not  exit.  There  are  other  explicit  benefits  for  the 
industry.  Privacy  standards  create  a  level  playing  field,  so  companies  don't  fall  into  an  arms  war, 
each  trying  to  collect  the  most  data-at  any  cost.  "Business  will  benefit  from  the  right  level  of 
government  involvement,"  says  Nick  Grouf,  founder  of  PeoplePC,  which  offers  cheap  PCs  and 
Net  connections.  "Standards  are  good,  but  they  need  some  teeth,  and  this  is  where  government 
becomes  a  good  partner." 

FEDERAL  STANDARD.  In  the  long  term,  the  privacy  protection  that  Business  Week 
espouses  will  make  life  simpler  for  businesses  on  the  Net.  More  than  20  states  already  are 
moving  to  enact  some  kind  of  guarantees.  A  minimum  federal  standard  of  online  privacy  would 
decrease  the  cost  and  complexity  for  companies.  It  also  would  increase  trust.  If  businesses  really 
want  to  be  close  to  their  customers,  trust  is  paramount.  This  approach  also  will  shrink  the  gap 
that  has  arisen  between  the  U.S.  and  Europe,  where  privacy  already  is  recognized  as  a  right.  The 
Europeans  have  stood  firm,  putting  American  companies  in  the  peculiar  position  of  extending 
greater  privacy  protection  in  Germany  or  France  than  at  home. 

It's  time  to  iron  out  the  inconsistencies.  Here  are  our  prescriptions  for  protecting  personal 
^  privacy  without  jeopardizing  the  promise  of  e-commerce... 
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Web  Firms  Have 
Sorry  Record  on 
Public's  Privacy 

Internet 
businesses 
love  nothing 
more  than  self- 
regulation.  They 
just  want  to  be 
left  alone,  free 
from  govern- 
ment meddling, 
to  serve  their 
shareholders' 
and  the  public 
interest  by 
building  the  new 
economy.  But  no  CHARLES  PILLER 
issue  demon- 
strates their  hy- 
pocrisy better  than  how  they  handle  the  is- 
sue of  privacy. 

Consider  that  of  29,000  Web  sites  sur- 
veyed recently,  fewer  than  23%  posted  a 
privacy  policy  of  any  kind— and  only  a 
fraction  of  those  policies  offer  meanjngful 
protections  for  users.  That's  according  to  a 
survey  to  be  released  soon  to  the  public  on 
http://www.privacyratings.com,  a  site  op- 
erated by  San  Diego-based  start-up  Enon- 
ymous.com.  The  company  makes  an  "e- 
wallet"  product  that  allows  Web  shoppers 
uTmake  purchases  without  revealing  their 
personal  information.  . 

Meanwhile,  other  surveys  show  that 
■  Web  users  are  growing  apoplectic  over  the 
sale  or  disclosure  of  their  personal  data  to' 
merchants  and  Web  marketers  who  deluge 
them  with  junk  e-mail.  Millions  of  potential 
online  shoppers  have  avoided  e-commerce 
because  of  fear  that  vendors  will  abuse 
■their  trust,  according  toJj\)rrester  ^e" 
search  in  Cambridge,  Mass. 

Such  attitudes  can  hardly  be  surprising, 
given  that  egregious  violations  of  online 
privacy  have  become  commonplace. 

For  example,  RealNetworks,  a  leading 

Web  multimedia  company,  last  year  was 

found  to  have  been  tracking  the  listening 
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Thanks — and  no  thanks 


ere's  perhaps  a  surprising  statement:  Pure-play  Internet 
merchants,  we  owe  you  one.  Yes,  catalogers  everywhere 
should  take  a  moment  to  thank  a  number  of  selected  Web- 
based  companies  for  helping  us  elevate  the  status  of  the 
catalog  business  this  past  year 


artention  from  the  investment  conn 
chants  had  not  experienced  those 
foul-ups,  many  traditional  catalog 
marketers  would  not  be  getting  the 
current  level  of  attention  from 
investment  firms  (see  our  cover 
story  "Private  money").  And  if  the 
pure-play  Web  merchants  had  be- 
gun to  show  any  profits  by  now, 
instead  of  continuing  to  operate  in 
the  red,  catalogers  would  not  be 
looking  so  good  in  comparison! 
Because  of  the  disappointing 


mnity.  Ifthentw-to-thc-Wch  m< 
vell-publicizcd  holiday  opcraiior 


operat 


Dnal 


rid   fin 


mance  of  many  Web  marketers 
catalog  companies  are  much  mor< 
attractive  '■  acquisition  candidates 
Seen  as  complements  to  the  glam- 

chants,  traditional  catalogers,  wit! 
a  real  asset  base,  a  real  bottom  line, 
tise,  are  becoming  more  respected  companies. 

So  thanks  again,  Web  merchants,  for  putting 


lofcus 


No  thanks  for  this  mess! 

But  no  thanks,  Web  merchants,  for  all  the  attention  now  focused  on 
privacy.  We  were  not  happy  when  we  heard  that  Amazon. corn's  Alexa 
software  subsidiary  was  being  sued  by  two  consumers  for  alleged  invasion 
of  privacy  and  misuse  of  personal  information.  Nor  were  we  happy  to 
hear  that  Alexa  is  now  also  the  subject  of  an  investigation  by  the  Federal 
Trade  Commission.  No  matter  the  outcome  of  these  cases,  the  public 
reaction  to  the  media's  high-profile  coverage  of  these  issues  will  undoubt- 
edly trickle  down  to  affect  mail  order  marketers.  More  restrictions  on 
data  usage  seem  almost  inevitable  as  a  result. 

Moreover,  the  recent  security  breaches  on  a  number  of  Websites, 
which  resulted  in  the  posting  of  customer  credit  card  information,  are 
not  helping  our  cause.  Making  consumers  even  more  fearful  about 
remote  shopping  affects  all  of  us — including  traditional  printed  catalogs. 

With  this  in  mind,  make  sure  you  devore  more  space  in  your  cata- 
logs and  on  your  Websites  to  explanations  of  your  privacy  policies  and 
security  procedures.  With  the  microscope  focused  on  all  of  us,  going  all- 
out  to  reassure  consumers  that  buying  from  you  is  safe  is  more  important 
than  ever. 


Laura  M.   Be 


Visit  us  online  at  www.CatalogAgemag.com! 
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the  future. 


'It's  the  mailer... 

who  drives  this  business. 
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Threat  of  Litigation 

As  could  be  expected,  the  concerns  electronic  and  wire  communications), 
surrounding  privacy  on  the  Internet  as  well  as  a  claim  lor  common  law  mva- 
th.it  have  provoked'  these  legislative  slon  ol  privacy.  The  complaint  seeKS 
responses  and  regulatory  Investigations    both  ln)unctlve  relief  and  damages 

More  cases  can  be  expected    o  lol- 


el  scq.  (the  unlawful  Interception  of 


and  enlorcenteiit   measures  ore  now         ...„ -  .-. 

resulting  I"  the  beginnings  of  what  low.  The  Wash  ngton,  Debased  E  ec 
could  he  a  wave  ol  private  civil  lltlga-  Ironic  Privacy  Inform* ^ '»£ 
Hon.  Among  the  mosl  public  of  these  filed  a  separate  complaint  against  Dou- 
actlons  are  recent  claims  asserted  bledlck  with  the  FTC,  who  has  now 
against  Doubleclick  and  Amazon."  launched  an  Investigation  Intc .the  con 

I hleCIIck  Is  one  ol  the  Internet's     pany's  data  <°»««*XES5«JSta 

la.gesl  advrrlKI.it!  Ilrms.  It  sends  ban-     hleCIIck  also  recently  disclosed  that  te 
„er  advertisements  to  ...any  thousands     New  York  Attorney  General  has  begun 
ol  lnlen.Pl  sites  and  tracks  consumer     an  Investigation  as  welL    *■«»»»» 
.espouses.  DoubleCIIck  recently  merged      also  disclosed  In  an  StC  III  ng !««  «* 
will,  a  cllr.-ct  ma,  kel lug  co,„pa„y  called      FTC  Is  Investigating  certain  In  forma, ion 
Abacus,  which  controls  a  database  that      practices  of  Alexa  and  whether  It  has 
is  alleged  lo  have  Information  on  90  per-     engaged  In  unfair  practices, 
cenl  ol  American  households.  On  Jan. 
28,  20(10.  DouhleCIIck  was  first  sued  In 
California  Superior  Court  by  an  Indi- 
vidual plaintiff  "on  behalf  of  the  Gener- 
al Public  ol  the  State  of  Calllomia" 
alleging  that  DouhleCIIck  Is  violating  her 
and  the  General  Public's  privacy  by  link- 
ing personal  Information  without  cop-  \ 
sent  to  the  Information  contained  |h 
Abacus's  database.    The  allegation  Is 
thai  DouhleCIIck  has  been  using  "cook- 
ie" technology  to  acquire  Inlor.natlo.l 
about  users'  buying  habits,  responses 
to  advertising  and  the  websites  users 
vlsll  and  "through  using  the  Abacus 
database  |ls]  then  able  to  obtain  a 
potentially  vast  amount  of  personal 
information  about  the  user."  That  Infor- 
mation   allegedly    Includes    "names, 
addresses,  ages,  shopping  patterns  and 
histories,  credit  card  Information,  bank 
accounl  Information,  sexual  orientation 
and  |  .references,  and  other  private  Infor- 
mation." The  complaint  also  alleges  that 
DoubleClick  lulled  the  public  Into  a  lalse 
sense  of  privacy  "while  deceptively 
acquiring,  storing  and  selling  millions  of 
Internet  users'  most  private  and  per- 
sonal Information  for  prollf " 

In  Ihe  Jminick  case,  the  claim  against 
DouhleCIIck  Is  asserted  under  Califor- 
nia   Business    &    Professions    Code 
§§1 72011  et  se<|..  which  Is  California's 
unfair  business  practices  statute,  and 
§§17501),  which  covers  unfair  and  mis- 
leading advertising.     The  California 
in, lair  business  practices  statute  does 
not  provide  lor  a  civil  damages  remedy. 
(Of  course,  Ihe  statute  does  provide  lor 
Ihe    recovery    of    attorney's    fees.) 
Accordingly,  Hie  plaintiff  Is  seeking 
injunctive  relief  —  among  other  things, 
an  order  Iron,  the  court  preventing  Dou- 
bleClick "Iron,  using  any  technology  lor 
Ihe  purpose  ol  personally  Identifying 
.  Internet  users  or  Web  Site  visitors, 
Including  'cookies,'  on  the  Internet, 
!   without  obtaining  Hie  prior  express 
|   written  consent  ol  the  Inlernet  user." 
The  Jurfnicli  case  against    Double 
Click.  Is  only  the  beginning.  In  the  suc- 
ceeding weeks  since  thai  case  was  llled, 
more  actions  (some  seeking  class  action 
slalus)  have  been  brought  against  Dou- 
hleCIIck regarding  Its  privacy  policies.1" 
in  addition  lo  claims  similar  to  those 
alleged  In  Judnlck,  some  of  these  cases 
also  allege  violations  ol  Ihe  lederal  elec- 
tronics privacy  statute. 

The  claim  against  Amazon  and  Its 
subsidiary  Alexa  Inlernet  ls_a  purport- 
ed class  action  f.W  ihjiincilve  rebel  and 
damages  on  behalf  of  all  users  of  Alexa 
products  for  defendants'  alleged  "prac- 
tice ol  secrelly  obtaining  consumers' 
personal,  private,  confidential  Infor- 
mation without  their  consent  or  with- 
out having  made  the  proper 
disclosure ."  The  gist  of  the  complaint 
Is  thai  Alexa  did  not  adhere  to  its  re|v 
resented  privacy  policy,  which  assert- 
ed that  lulu. matlon  on  Web  usage  that 
It  obtained  was  anonymous  The  plain- 
till  asserts  claims  under  the  lederal 
electronics  privacy  statute,  IB  U.S.C. 
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Economy 

Gets  Ugly 


BY  Debra  Aho  Williamson 


en  months  ago  in  this  magazine, 
I  wrote  about  a  concept  I  dubbed  "the  information- 
exchange  economy."  This  economy  would  transform 
the  Internet  from  a  browse-and-surf  environment 
into  a  giant  information  exchange.  Personal  informa- 
tion would  become  the  new  currency,  opening  doors 
to  an  array  of  products  and  services.  Targeting 
would  no  longer  mean  sending  a  single  message 
to  a  single  person.  It  would  mean  delivering  the 
message  and  tracking  the  response  -  both  the 
immediate  response  and  all  future  responses. 

Well,  folks,  the  information-exchange  economy 
is  here.  And  boy,  does  it  look  ugly. 

For  starters,  there's  Doubleclick,  favorite  punch- 
ing bag  of  the  press  and  privacy  watchers  every- 
where. The  ad-delivery  firm  is  facing  lawsuits  and  an 
FTC  investigation  over  the  methods  it  uses  to  target 


its  advertisements.  The  furor  stems  from 
Doubleclick's  stated  intention  to  match  its  once- 
anonymous  online  user  profiles  to  offline  stats  such 
as  name,  address,  gender  and  retail  purchases. 

Online  retailers  have  likewise  fallen  under  the 
spell  of  the  information-exchange  economy. 
Amazon.com  is  testing  a  service  called  zBubbles 
that  pops  up  to  offer  you  a  better  deal  on  items 
you're  shopping  for.  This  plan  is  also  the  focus  of 
an  FTC  inquiry  because  people  are  afraid  it  might 
send  information  back  to  Amazon  without  their 
permission.  Another  new  shopping  aid,  Dash.com, 
consists  of  a  downloadable  "viewbar"  that  prods 
you  with  rebates  while  you  browse  certain  sites. 
As  long  as  the  viewbar  is  on,  it  tracks  and  records 
every  single  site  you  visit. 

Even  a  tool  as  innocuous  as  a  form-filling  device 
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can  tap  personal  information  in  ways  users  may 
not  suspect.  Gator.com's  software  auto-fills  with 
aplomb.  But  it  also  keeps  tabs  on  what  Web  sites 
you  visit.  Gator  plans  to  use  the  information  to  - 
you  guessed  it -sell  targeted  advertising. 

Then  there  are  firms  that  purport  to  protect 
your  privacy  at  the  same  time  they're  using  your 
profile  to  shove  ads  at  you.  Lumeria,  one  such 
company,  touts  its  service  this  way:  "Because 
yourSuperProfile  is  private,  you  can  feel  safe  fill- 
ing it  with  detailed,  timely  and  accurate  data.  As 
you  can  imagine,  this  would  be  valuable  informa- 
tion to  marketers  -  and  they  will  pay  you  for  it!" 
This  is  privacy? 

Privacy  advocates,  meanwhile,  are  busy  hunting 
hobgoblins  on  every  Web  site.  Even  sites  with  a 
privacy  policy  certified  by  an  organization  like 


Within  a  week- though  I  hadn't  done  a  click  of 
shopping  with  Dash  -  it  had  compiled  a  long  list  of 
sites  I'd  visited.  The  idea  of  editing  the  list  worried 
me.  Would  a  deleted  site  actually  be  erased  from 
Dash's  servers?  Or  would  it  simply  be  red-flagged? 
"Hey,  everybody,  here's  one  she  really  doesn't  want 
anyone  to  know  about!" 

Recently  proposed  legislation  takes  consumer 
involvement  to  a  whole  new  level.  One  Senate  bill 
would  require  Web  sites  to  warn  consumers  before 
they  place  "cookies"  on  their  computers.  Never 
mind  that  browsers  have  offered  consumers  that 
option  for  years. 

Profiling,  targeting  and  privacy  are  the  most 
urgent  issues  confronting  Internet  marketing 
today.  For  the  following  special  report  we  went 
behind  the  scenes  of  the  debate  to  get  stories 


For  the  imf  ormation-exchange  , 

eCOnOtiiy  to  fulfill  its  potential, 

all  players  must  recognize  that  the 
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TRUSTe  or  BBBOnLine  aren't  safe.  Several  that 
have  paid  for  such  a  seal  of  approval  have  found 
their  wrists  slapped  regardless. 

Something  has  gone  terribly  wrong  on  the  way 
to  the  information-exchange  economy.  The  quest 
for  marketing's  holy  grail  -  reaching  the  right  per- 
son with  the  right  message  at  the  right  time  -  has 
turned  into  a  slog  through  a  morass  of  competing 
self-interests,  overbearing  privacy  proponents  and 
businesses  that  say  one  thing  and  do  another. 

So  what's  next?  The  answer  most  often  advanced 
by  industry  and  government  is  to  give  consumers 
access  to  all  the  information  that's  gathered  about 
them  and  allow  them  to  correct  it  or  control  its  use. 
That  solution  has  two  problems:  It's  time-consum- 
ing; and  if  people  are  allowed  to  look,  what  they 
see  might  make  them  more  paranoid  than  ever. 

Consider  Dash.com.  It's  one  of  the  few  Web 
sites  that  let  users  view  what  it  calls  their  "private 
browsing  data"  whenever  they  want  and  delete 
sites  they'd  rather  keep  hidden. 

I  downloaded  Dash  and  used  it  a  few  times. 


that  describe  how  profiling  really  works  (hint:  It's 
not  nearly  as  juicy  as  the  popular  press  makes  it 
sound),  and  what  companies  are  doing  to  protect 
themselves  from  privacy  backlash.  We've  also  got 
a  detailed  list  of  companies  involved  in  profiling  - 
a  business  that's  growing  by  the  day. 

For  the  information-exchange  economy  to  fulfill 
its  potential,  all  players  must  recognize  that  the 
operative  word  is  not  "information"  but  "exchange." 
Giving  consumers  the  right  to  see  the  information 
that's  collected  isn't  enough.  Giving  them  a  reason  - 
and  a  reward  -to  provide  information  about  them- 
selves in  the  first  place  is  a  much  smarter  idea. 

In  the  legends,  it's  never  clear  what  the  Holy  Grail 
really  is:  a  stone,  a  chalice,  a  shroud.  Or  is  it  knowl- 
edge itself?  The  holy  grail  of  Internet  marketing  is 
similarly  obscure.  We  may  think  we  know  what  we're 
looking  for  but,  in  the  end,  it  will  no  doubt  be  some- 
thing far  different  than  what  we'd  imagined,  mss 

DebraAho  Williamson  (debbie@milest0ne2.com) 
is  a  contributing  editor  to  The  Standard. 
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IVust* 
Bust? 


BY  Michelle  V.  Rafter  LOS  ANGELES 


Bob lewin  has  turned  the  TRUSTe  seal  into  one  of  the  internet's  most  prominent  logos. 
Now  he's  gotto  make  sure  it's  working. 
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he  TRUSTe  seal  is  no  bigger  than 
the  tip  of  your  pinkie.  It  bears  the  word  "TRUSTe" 
and,  sometimes,  the  phrase  "Click  here  to  verify." 

For  the  privilege  of  displaying  the  seal  on  its 
Web  site,  a  company  must  join  TRUSTe  and  allow 
the  nonprofit  organization  to  audit  and  approve  its 
online  privacy  policy.  The  seal  is  supposed  to  reas- 
sure consumers  that  the  Web  site  they're  visiting  is 
sticking  to  the  promises  it  has  made  regarding  the 
collection  and  sharing  of  personal  data. 

In  three  years,  more  than  1,300  companies  have 
joined  TRUSTe,  making  the  seal  the  most-displayed 
ad  banner  or  promotional  banner  in  the  country.  In 


the  first  week  of  February,  for  example,  a  quarter 
of  all  U.S.  Internet  users  viewed  a  Web  page  that 
displayed  the  seal  -  a  total  of  653  million  impres- 
sions. The  runner-up  that  week,  ad  banners  for 
Amazon.com,  had  only  156  million  impressions, 
according  to  Nielsen  NetRatings. 

Small  but  mighty,  the  TRUSTe  seal  is  the  Inter- 
net's oldest,  most  widespread  attempt  to  police 
itself  in  matters  of  user  privacy. 

Now  it's  under  attack.  Several  TRUSTe  members 
have  had  well-publicized  privacy  lapses,  and 
TRUSTe  is  under  mounting  pressure  to  do  a  better 
job  of  sniffing  out  transgressions.  If  it  doesn't,  then 
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others  will,  because  the  company  is  up  to  its  nose 
in  competitors  just  when  it  needs  them  least. 

To  quell  its  critics  and  keep  pace  with  industry 
changes,  TRUSTe  officials  are  beefing  up  enforce- 
ment. "Somebody's  got  to  step  up  to  the  plate  to 
get  a  handle  on  it,  and  we  think  it  should  be  us," 
says  Bob  Lewin,  TRUSTe  executive  director. 

Critics  wonder  if  it's  too  little,  too  late.  "It's  ironic 
that  TRUSTe  was  set  up  to  show  the  effectiveness  of 
self-regulation  and  it's  done  the  opposite,"  says 
David  Sobel,  general  counsel  of  the  Electronic 
Privacy  Information  Center  and  a  vocal  TRUSTe  critic. 


harshly  with  offenders  TRUSTe  has  diluted  its  pro- 
gram -  and  opened  the  door  for  privacy  legislation. 

Adding  fuel  to  claims  that  industry  self-policing 
isn't  working  is  the  fact  that,  for  all  its  heavyweight 
support,  many  big  names  refuse  to  join  TRUSTe.  Of 
the  50  most  popular  Web  sites  in  January  (the  lat- 
est data  available  from  Media  Metrix)  only  28  were 
TRUSTe  members.  As  of  December  1999,  only  four 
of  the  top  10  online  shopping  sites  belonged  to 
TRUSTe:  AOL,  eBay,  eToys  and  MyPoints.com. 

TRUSTe  "is  by  no  means  a  gold  standard.  It's 
more  like  a  bare  minimum,"  says  Eric  Schmitt,  a 


"It's  ironic  that  TRUST©  was  set  up  to  show 

the  effectiveness  of  Self-I*eglllatiOII 
and  it»s  done  die  OppOSite9"says  David 
Sobel  of  the  Electronic  Privacy  Information  Center. 


On  at  least  two  occasions,  TRUSTe  has  been  lam- 
basted for  not  taking  harsher  measures  against 
members  that  had  committed  what  appeared  to  be 
glaring  violations  of  their  own  TRUSTe  contracts. 
In  November  a  news  report  revealed  that  Real- 
Jukebox,  a  software  plug-in  by  RealNetworks, 
was  surreptitiously  collecting  data  on  users' 
music-listening  habits  and  passing  it  back  to  Real. 
Working  with  TRUSTe,  Real  discontinued  the  prac- 
tice, appointed  a  privacy-compliance  officer  and 
audited  its  privacy  policies. 

But  because  the  violation  involved  a  piece  of 
software,  which  isn't  covered  in  its  charter,  TRUSTe 
declined  to  take  further  action. 

That  wasn't  the  first  time.  In  March  1999,  Micro- 
soft was  caught  transmitting  user  information 
through  the  Windows  98  registration  wizard.  Then, 
too,  TRUSTe  refused  to  act  decisively  because  the 
transgression  involved  software,  not  a  Web  site. 

Over  the  past  six  months  a  handful  of  other 
TRUSTe  members  have  been  involved  in  lesser 
infractions.  [See  chart,  page  197.]  As  of  late 
February,  TRUSTe  was  still  investigating  privacy 
breaches  uncovered  earlier  that  month  at  Alexa 
Internet  and  at  several  health  care  Web  sites. 
TRUSTe  has  never  revoked  a  member's  seal, 
although  Lewin  insists  he's  come  close  and  some 
members  have  dropped  out  rather  than  continue 
to  comply.  Critics  say  that  by  failing  to  deal  more 


Forrester  Research  analyst  who  follows  privacy 
issues.  "The  fact  that  [almost]  half  the  most-visited 
sites  don't  meet  the  bare  minimum  is  pretty  scary." 

While  TRUSTe  contends  with  its  critics,  it's  also 
fighting  off  a  swelling  contingent  of  competitors. 
The  Council  of  Better  Business  Bureaus  started  its 
own  privacy-policy  auditing  service,  BBBOnLine,  a 
year  ago,  and  has  picked  up  260  members,  includ- 
ing American  Airlines,  AT&T,  CDnow  and  Dell.  Most 
of  the  Big  Five  accounting  firms  also  run  some  type 
of  privacy-policy  audit  program. 

Another  newcomer,  Secure  Assure  in  Denver, 
Colo.,  hopes  to  garner  industry  support  by  offering 
not  only  an  audit  program  but  also  stringent  priva- 
cy guidelines  stipulating  that  its  sealholders  will 
never  share  consumers'  private  information  with  a 
third  party.  Since  launching  in  September,  Secure 
Assure  has  attracted  168  members  -  including 
Brain.com,  eCode  and  Fogdog  Sports  -  some  of 
which  are  also  TRUSTe  members. 

"The  average  consumer  doesn't  want  to  have  to 
read  through  a  1,000-word  policy  statement  on 
every  site,"  says  Phil  Lockwood,  Secure  Assure 
cofounderand  chief  executive.  "When  they  see 
[our  seal]  they  immediately  know  [the  site]  meets 
the  same  standard  as  every  other  site." 

TRUSTe,  BBBOnLine  and  Secure  Assure  all 
charge  yearly  license  fees  based  on  a  company's 
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annual  revenue.  BBBOnLine  and  Secure  Assure 
have  purposely  undercut  TRUSTe.  BBBOnLine's 
fees  range  from  $150  to  $3,000;  Secure  Assure's 
run  from  $199  to  $2,330.  TRUSTe's  fees  range  from 
$299  to  $4,999,  though  Lewin  says  the  top  bracket 
could  increase  to  $6,999  later  this  year. 

Critics  have  accused  TRUSTe  of  favoritism  in  its 
treatment  of  high-profile  sealholders.  Microsoft, 
for  example,  is  a  major  TRUSTe  sponsor.  TRUSTe 
officials  parry  such  charges  by  pointing  out  that 
sponsorships  account  for  only  15  percent  of  the 
nonprofit's  annual  revenues  (which  they  decline  to 
specify)  and  that  license  fees,  not  sponsorships, 
are  used  to  fund  day-to-day  operations. 

Lewin  is  now  talking  tough  about  heavier  penal- 
ties for  companies  caught  violating  their  TRUSTe 
contracts.  One  of  them  is  Amazon.com.  The  online 
retail  giant  isn't  a  TRUSTe  member  but  its  Alexa 
Internet  subsidiary  is.  In  early  February,  Amazon 
revealed  that  the  Federal  Trade  Commission  is 
investigating  Alexa  for  allegedly  collecting  visitors' 
personal  data. 

Amazon  spokesman  Bill  Curry  deflected  ques- 
tions about  Alexa,  saying  the  subsidiary  makes  its 
own  privacy-policy  decisions.  At  Amazon,  "we  let 
our  actions  speak  rather  than  stickers,"  he  adds. 

Lewin  insists  TRUSTe  will  yank  Alexa's  seal  if  it 
has  to.  He  also  says  the  situation  points  out  the 
difficulty  of  monitoring  an  industry  that's  in  a  merg- 
er-and-acquisition  boom.  When  companies  intermin- 
gle services,  whose  policy  do  they  follow?  "Most 
companies  want  to  do  the  right  thing.  The  problem 
is  they  don't  know  what  the  right  thing  is." 

To  stop  privacy  .infringements  such  as  those  at 
Realjukebox,  Lewin  says  TRUSTe  will  expand  its 
seal  program  to  cover  user  information  collected 
by  Web-based  software.  He  hopes  to  have  a  soft- 
ware-privacy certification  process  in  place  by  year's 
end  or  early  2001.  For  an  industry  working  on 
"Internet  time,"  that  sounds  like  forever.  Lewin 
says  it's  as  fast  as  he  can  go.  "People  forget 
Internet  time  runs  into  people  time." 

In  February,  TRUSTe  said  it  would  form  an  indus- 
try board  to  create  guidelines  for  members  that 
partner  with  DoubleClick  and  other  ad  networks 
whose  data-collection  practices  are  under  fire. 

By  midyear  TRUSTe  plans  to  launch  a  public- 
awareness  campaign  of  radio  spots,  posters  and 
direct  mail.  A  previous  such  drive  pushed  the  num- 
ber of  consumer  complaints  about  privacy  viola- 
tions filed  with  TRUSTe  from  157  in  1998  to  1,285 
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.s  concern  over  online. privacy  escalates,  a  handful' 
of  companies  -  including  AllAdvantage.com,  America 
Online,  Intel,  RealNetworks,  and,  recently,  DoubleClick  - 
have  created  high-level  positions  to  hammer  out  privacy 
guidelines  and  ensure  that  the  rest  of  the  company 
follows  them. 

;  Real  instituted  an  office  of  privacycompliance  as  one 
of  several  remedies  recommended  by  TRUSTe  after  it  was 
revealed  last  November  that  the  streaming-media  compa- 
ny's Realjukebox  software  was  surreptitiously  collecting 
data  on. users'  listening. habits.  Real  took  the  steps  even- 
though  TRUSTe  ultimately  decided  that  software  wasn't 
covered  under,  its' privacy-seal  program. 

The  Net  firm  named  product  manager  Keela  Robison 
its  temporary  privacy-compliance  officer,  reporting  direct- 
ly to  COO  Tom  Frank.  Since  then,  Robison  has  conducted 
an  internal  audit  of  Real's  privacy  policies  and  is  now  . 
working  with  an  unnamed  Big  Five  accounting  firm  on 
an  external  review.  Robison  and  a  privacy  law  expert 
from  the. company's  legal  department  now  routinely  sit 
in  on  product  reviews,  look  over  product  specifications 
and  read  contracts. 

"If  .people  aren't  clear  what  our  stance  is  on,  say, 
an  e-mail  campaign,  we  can  come  in  and  tell  them  if    ;■.; 
the  activity  is  in  compliance,"  Robison  says.    '.;. 

Real  recently  made  the  privacy-compliance  position 
permanent  and  will  hire  someone  with  a  policy  back-  ■ 
ground  to  fill  it,  a  company  spokeswoman  says. 

Other  companies  are  naming  privacy  czars  to  stop 
trouble  before  it  happens.  AHAdvantage  in  Hayward, 
Calif.,  pays  people  50  cents  an  hour  to  download  its 
ViewBar  software,  Which  displays  ads  while  users 
browse  the  Web.  It  tailors  the  ads  by  monitoring  users' 
online  habits.         • 

Last  August,  AHAdvantage  hired  Ray  Everett-Church, 
an  attorney  who  specializes  in  privacy  and  online-market- 
ing issues,  to  be  its. first-ever  chief  privacy  officer,  and 
VP  of  public  policy.  He  reports  directly  tothe  CEO  and  ,'■" 
preaches  the  company's  privacy  gospel  to  all  depart- 
ments. He's  also  one  reason  AHAdvantage  has  opted 
.hot  to  join  a  privacy  seal  program.  ..■'■■•  ,:. 

"Seal  programs  only  certify  that  one  does  whatthey  say 
they're  going  to  do,"  Everett-Church  says.  "Butread  some 
of  the  policies  that  have  seals  affixed  to  them -in  some 
cases  they're  road  maps  to  invasions  of  privacy.?-  M.V.R.. 
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in  1999.  The  "great  majority"  weren't  related  to  pri- 
vacy or  didn't  involve  TRUSTe  seal  holders,  Lewin 
says.  Of  the  remainder,  TRUSTe  asked  the  member 
company  involved  to  take  action,  "and  in  almost  all 
of  those  cases  we  were  able  to  resolve  the  con- 
sumer's complaint  to  their  satisfaction,"  he  says. 

Despite  TRUSTe's  flaws,  the  20-employee  organi- 
zation -  split  between  Cupertino,  Calif.,  and  Wash- 
ington, D.C.  -  saw  membership  increase  fivefold  last 


year.  It  gets  150  to  200  new  applications  a  month 
and  has  500  companies  in  the  pipeline. 

"I'm  proud  of  what  we've  been  able  to  do," 
Lewin  adds.  "That's  the  good  news.  The  bad  news 
is  [our  membership]  is  humbling  compared  with 
the  number  of  Web  sites  that  collect  personal 
information.  We  still  have  a  lot  of  work  to  do."  ess 

Michelle  V.  Rafter  (mvrafter@delta.net)  is  a 
contributing  writer  in  Los  Angeles. 
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and  Yahoo 


Amazon  revealedthat  the  FTC  Is  investigating 
.  claims  that  Amazon's  wholly  owned  subsidiary, 
collects  visitors'  personal  data,  .in  violation  of  an 
Amazon  policy  to  gather  anonymous  data  only. 
Amazon  and  Alexa  have  been'  named  in  two  civil 
suits  over  the.practices. 


A  news  report  revealed  that  while  E-Loan  doesn't 
use  cookies  or  share  users' personal  data  with  third 
parties,  several  recently  acquired  subsidiaries  do, 
violating  E-Loan's  stated  privacy  policy.  The  firm 
quickly  posted  a  rewritten  policy  on  its  Web  site. 


Amazon  isn't  a  TRUSTe  member  but  Alexa  Internet 
is,  As  of  late  February,  TRUSTe  was  reviewing  the 
situation  and  said  it  would  revoke  Alexa's  seal  if 
necessary. 


RealNetworks 


A  health-care  trade.group  revealed  breaches  .in  the 
stated  privacy  policies  of  16  health  care  Web  sites, 
including  six  TRUSTe  members.  Among  other 
things,  the  sites  were  criticized  for  failing  to 
disclose  that  ad  banner  networks  they  participate  . 
in,  such  aS'DoubleClick,  let  advertisers  collect  any 
■personal  information  that  a  customer  enters  on  a 
page  where  an  ad  appears. 


A  news  report  revealed  that  Real's  Realjukebox 
•software  plug-in  surreptitiously  collects  data  about 
users'  music-listening  habits  and  passes  It  on  to 
the  company. 


Because  E-Loan  actedpromptly  to  align  its  policy 
and  practice,  TRUSTe  took  no  action. 


A  week  after  the  incident,  TRUSTe  said  it  is  "work- 
ing with  licensees  to  ensure  compliancewith. the 
program/'though  TRUSTe  has  not  issued  specific 
remedies.    '  .      " 


A  security  hole  in  Microsoft's  Web-based  e-mail 
program  allowed  hackers  to  snatch  users'  IDs 
and  passwords. 


TRUSTe  declined  to  investigate  because  Realjuke-  • 
box  is  software  and  isn't  covered  under  its  charter. 
The  group  how  says  it  will  expand  its  seal  program 
to  include  software  and  hopes  to  have  a  software 
privacy-certification  process  in  place  by  year's  end 
or  by  early  2001. 


Microsoft  fixed  the  bug  and,  at.TRUSTe's  request, 
submitted  to  a  third-party  privacy, audit. 


Microsoft  was  caught  transmitting  user  information 
through  the  -Windows  98  registration  wizard  but, 
once  revealed,  swiftly  stopped  the.practice. 


TRUSTe  investigated  and  determined  the  breach, 
fell  outside  its  purview.  But  it  issued  a  statement 
condemning  thepractice. 
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The  PROFILERS: 


Invisible 

Friends 

Meeting  the  people  behind  the  scenes 
at  "browser  companion"  gator.com. 


BY  Megan  Barnett 


ideringall  the  discussion 
there's  been  on  the  topic  of  profiling,  by  now  you've 
probably  formed  a  picture  in  your  mind  of  how  it 
works:  AT-shirted  techie  huddles  in  the  glow  of  his 
monitor,  vigilantly  tracking  your  every  move  on  the 
Net.  Suddenly,  he  strikes.  "He's  at  ESPN.com!"  he 
shouts.  "Send  him  the  Chevy  pickup  ad!" 

The  truth  about  targeting  is  much  less  exciting. 
But  it's  far  more  compelling.  Someone  is  not  watch- 
ing you,  something  is:  the  all-seeing,  all-knowing 
eyes  of  a  bunch  of  Windows  NT  servers,  humming 
quietly  to  themselves  in  a  cool,  dark  room. 

Gator.com  is  one  of  many  startups  currently 
building  a  business  on  the  basis  of  targeted 
advertising.  Gator's  lure  is  its  free  digital  wallet, 
which  knows  just  when  to  pop  up  with  your  ship- 
ping information  and  password,  in  only  eight 
months  the  gimmick  has  attracted  2  million  users 
to  Gator,  making  it  one  of  the  leaders  in  the  wal- 
let field. 

Gator  users  will  soon  be  seeing  more  of  their 
steadfast  shopping  companion.  Gator  will  not  only 
pop  up  when  you're  ready  to  make  a  purchase,  but 
also  before  you  buy.  So  when  you're  contemplating 
that  Crocodile  Dundee  video  at,  say,  Reel.com,  Gator 
will  surface  to  offer  you  a  $10  coupon  from  Reel's 
competitor  BigStar.com.  just  as  you  complete  your 


customer  application  atSchwab.com,  Gator  could 
"surprise  and  delight"  you  with  an  offer  of  $75  off 
membership  at  a  site  like  E-Trade.- 

If  you're  not  surprised  and  delighted,  you  can 
uninstall  the  software.  But  if  you  do  want  Gator  to 
make  an  appearance  when  you  go  to  a  site,  you 
can't  opt  out  of  the  targeted  ads  that  Gator  will 
soon  be  sending  users.  It's  all  or  nothing.  Because 
as  Gator  and  businesses  like  it  are  discovering,  the 
money's  not  in  wallets,  it's  in  ads. 

Given  the  number  of  companies  that  are  now 
tracking  consumers  online,  The  Standard  decided 
to  find  out  how,  exactly,  the  process  works.  We 
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asked  Gator  to  show  us,  and  Gator  obligingly 
offered  a  peek  behind  the  scenes. 

We  were  met  at  the  door  by  Scott  Eagle,  Gator's 
VP  of  marketing,  who  still  can't  get  over  his  com- 
pany's new  office.  "It  came  with  an  espresso 
machine!"  he  says,  a  trace  of  amazement  lingering 
in  his  voice.  "Would  you  like  some  espresso?" 

The  trendy  coffee  service  aside,  Gator's  digs  are 
not  exactly  what  you'd  expect  for  a  company  on 
the  cutting  edge  of  advertising.  It's  a  drab,  cookie- 
cutter  office  building  neighboring  the  Oracle  cam- 
pus in  Redwood  City,  Calif.  Inside  is  a  sea  of 
Dilbert-like  cubicles,  most  of  them  vacant. 


receive  targeted  advertising.  "It's  a  fine  line,"  Eagle 
acknowledges.  "We  want  to  be  there  for  what  you 
want  us  to  do.  We'll  be  trying  different  ways  to  let 
you  tell  us  what  kinds  of  offers  you  want,  but  we're 
wrestling  with  what  to  do  with  the  occasional  user 
who  says,  'I  don't  want  to  see  any  offers.'" 

Americans  hate  junk  mail.  An  estimated  98  per- 
cent of  the  direct  mail  delivered  by  the  postal 
service  ends  up  in  the  trash.  So  why  do  we  keep 
getting  it?  Simple:  It  works. 

It  may  come  as  a  surprise  to  anyone  who  hates 
receiving  those  endless  RadioShack  circulars, 
but  there  are  people  out  there  who  actually  do 


The  brass  ring:  A  lot  of  companies  are  looking  for  ways  to  make  targeted  ads  palatable.  Gator.com 
Marketing  VP  Scott  Eagle  says  nine  out  of  10  Gator  users  like  to  get  Gator's  discount  offers. 


It  seems  Gator  executives  are  well  aware  of  the 
space  shortage  in  Silicon  Valley  -  the  office  they 
occupy  now  will  allow  for  growth  far  beyond  the 
current  35  employees.  There's  reason  for  optimism. 
Well  over  half  the  2  million  people  who  have  down- 
loaded the  Gator  wallet  since  last  July  are  using  it 
regularly,  Gator  says. 

Now  Gator's  going  to  test  their  willingness  to 


respond,  just  as  there  are  people  who  respond  to 
online  advertising.  What's  an  invasion  of  privacy 
to  one  consumer  is  a  great  deal  to  another. 

So  where  do  you  draw  the  line?  There's  no  easy 
answer.  For  instance,  when  Amazon.com  bought 
Alexa  Internet  in  1999,  no  one  knew  exactly  what 
Amazon  had  in  mind  for  the  browser-companion 
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software  company.  To  find  out,  the  Federal  Trade 
Commission  launched  an  investigation  last  month. 
Amazon  is  -cooperating  with  the  FTC,  whose  re- 
quest for  documents  is  being  called  an  "informal 


Gator.com  CEO  Jeff  AAcFadden  shows  off 
his  kid's  version  of  the  Gator  eyes  logo. 


informational  review"  by  the  online  retailing  giant. 

Unlike  the  privacy  storm  surrounding 
Doubleclick,  whose  target  users  are  largely 
unaware  they're  being  served  tailored  ads,  the 
Alexa  probe  raises  a  different  issue:  When  con- 
sumers agree  to  let  a  "browser  companion"  follow 
them,  exactly  what  rights  do  they  have? 

Many  of  these  companions  are  digital  wallets 
like  Gator.  They're  designed  to  make  the  checkout 
process  faster  and  easier  when  you're  shopping 
online.  You  give  the  wallet  your  name,  address, 
credit  card  number  and  shipping  preferences,  then 
every  time  you  make  a  purchase  the  software  fills 
out  all  the  forms  automatically. 

But  these  wallet  companies,  which  in  addition  to 
Gator  include  Brodia.com,  CyberCash's  InstaBuy 
and  EntryPoint,  have  admitted  that  simply  provid- 
ing a  form-filling  service  is  not  enough  to  sustain  a 
business.  That's  why  they're  morphing  and  calling 
themselves  "smart  shopping  companions"  or 
"credit  cards  2.0." 

Peel  off  the  labels,  though,  and  what  you  find 
are  little  more  than  targeted-advertising  compa- 
nies. They'll  remember  your  passwords  and  help    . 


you  fill  out  forms  online  -  if  you  let  them  deliver 
ads  for  other  products  they  think  may  interest  you. 

Once  you've  given  Gator.com  all  your  vital  stats, 
the  Gator  software  downloads  quickly  and  easily 
onto  your  PC  (it's  not  available  for  Mac  users  yet). 
From  then  on,  the  Gator  "eyes"  icon  automatically 
appears  in  the  lower  right-hand  corner  of  your 
screen  every  time  you  go  on  the  Internet.  The  soft- 
ware, including  an  encrypted  file  with  your  person- 
al information,  resides  on  your  desktop. 

When  you  reach  a  site  that  requires  a  password  • 
or  information  for  a  purchase,  a  window  pops  up 
to  ask  if  you'd  like  Gator  to  fill  in  the  data  for  you. 
Gator  engineers  have  collected  forms  from  thou- 
sands of  sites  on  the  Internet  and  programmed 
your  software  to  recognize  them.  Every  morning,  a 
team  of  programmers  enters  updates  to  accommo- 
date changes  in  existing  forms  and  add  new  sites 
requested  by  Gator  users. 

Gator  emphasizes  that  your  information  resides 
on  your  computer,  not  on  the  company  servers,  as 
it  does  at  some  of  Gator's  competitors.  But  Gator 
still  needs  to  know  when  to  pop  up,  so  it  has  to 
know  where  you  are  at  all  times,  right? 

Jeff  McFadden,  CEO  of  Gator.com,  insists  that 
he  has  no  intention  of  tracking  your  every  online 
move.  He  calls  Gator's  process  "selective  click- 
stream  monitoring." 

"When  you're  doing  anything  else  [besides 
shopping]  on  the  Net,  we  don't  want  to  know  about 
it,"  he  says.  "We  don't  want  that  kind  of  tracking 
information  on  our  servers." 

In  April  the  company  plans  to  publish  on  its 
homepage  a  list  of  the  roughly  25,000  sites  to 
which  Gator  can  supply  your  personal  information. 
Sites  that  aren't  on  the  so-called  Green  List  aren't 
tracked  by  Gator's  software.  Go  to  a  porn  site, 
Gator  won't  care.  Go  to  Wal-Mart.com,  Gator 
makes  a  note  that  you're  there. 

When  pressed,  McFadden  admits  that,  although 
Gator  doesn't  sort  data  by  individual  usage,  it 
could  if  it  wanted.  "It's  not  'we  can't,'  it's  'we 
won't,'"  he  says.  Instead,  Gator  sorts  only  by 
e-commerce  site,  compiling  information  from  its 
users'  activities  to  deliver  ads  from  advertisers. 

In  pitching  its  service  to  E-Trade,  for  instance, 
Gator  would  run  a  report  to  show  how  many 
unique  machines  logged  in  at  Yahoo  Finance,  MSN 
Finance  and  all  of  E-Trade's  other  competitors  dur- 
ing a  given  period.  It  would  then  break  down  the 
report  to  show  likely  targets  -  users  who  are  not 
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currently  trading  online  but  who  frequent  finance 
sites  on  the  Web.  Or  the  brokerage  might  want  to 
target  folks  who  aren't  trading  stocks  but  who  con- 
duct a  lot  of  transactions  online.  Gator  could  query 
its  database  and  deliver  a  report  to  E-Trade  that 
provides  a  snapshot  of  the  size  of  the  audience  it 
could  target  through  ads  delivered  by  Gator. 

Once  a  company  buys  an  ad  on  Gator,  the  fun 
begins.  Gator's  engineers  queue  the  advertisement 
in  the  Gator  system,  then  every  time  a  certain 
specification  is  triggered  -  say,  a  visit  to 
Schwab.com  -  Gator  fires  off  the  E-Trade  ad. 


San  Francisco-based  Brodia,  which  offers  a 
wallet  service  that  competes  with  Gator's,  takes 
a  different  approach  to  delivering  targeted  offers. 
Customers'  information  resides  in  encrypted  files 
on  Brodia's  servers  instead  of  on  the  user's  com- 
puter, enabling  shoppers  to  log  on  from  anywhere. 

Despite  that  Brodia's  business  model  relies 
almost  entirely  on  ad  revenues,  the  company  lets 
customers  opt  out  entirely  from  targeted  ads. 
Brodia  even  gives  its  customers  the  option  to 
remove  their  data  from  the  aggregated  information 
that's  shared  with  advertisers.  If  you  do  want  the 
offers,  advertisers  send  them  to  you  at  your 


Analysts  believe  the  outcome  of  the 

,  ...  Doubleclick :  investigation 

could  have  a  significant  impaet 

on  the  future  of  companies  like  Gator. 


Advertisers  that  have  signed  on  so  far  include 
video  retailer  BigStar.com,  GreatFlowers.com  and 
Ebates.com.  Gator  plans  to  roll  out  its  program  to 
a  large  number  of  merchants  by  the  end  of  June. 
Advertisers  can  pay  by  performance,  by  cost  per 
thousand  or  on  a  hybrid  CPM-performance  basis. 

A  legalese-filled  software  license  and  terms-of- 
service  list  on  the  site  lays  out  the  company's  inten- 
tion only  to  aggregate  user  information  for  targeted 
advertisements.  The  rather  opaque  prose  will  soon 
be  replaced  by  a  new  policy,  currently  being  drafted, 
that  the  average  Internet  shopper  can  understand. 

Asked  what  percentage  of  users  actually  read 
the  privacy  page,  Eagle,  the  marketing  VP,  says 
he's  not  sure.  "I  imagine  a  small  percentage  of 
people  at  the  time  of  the  download  actually  take 
the  time  to  read  it." 

Analysts  believe  the  outcome  of  the  Doubleclick 
investigation  could  have  a  significant  impact  on 
the  future  of  companies  like  Gator,  which  rely  sole- 
ly on  targeted-advertising  revenues. 

"If  the  Doubleclick  [investigation]  drags  along 
and  ends  up  being  a  juicy  one,  I  think  it  will  take 
on  the  kind  of  specter  that  the  Microsoft  trial  had," 
says  Charles  Rider,  senior  consultant  with  market 
research  firm  Patricia  Seybold  Group.  "This  is  just 
the  tip  of  the  iceberg." 


Brodia-hosted  e-mail  address  instead  of  in  a 
pop-up  window,  the  way  Gator  does. 

Gator's  own  research  shows  that  89  percent 
of  users  like  getting  Gator's  inaugural  offer  -  a 
coupon  for  video  retailer  BigStar.com  that  pops  up 
when  they  visit  a  competing  video  site.  "It's  the 
delivery  in  context  that  makes  it  magical,"  says 
Eagle.  "If  we're  going  to  send  you  a  $20  coupon  to 
buy  a  book,  it  will  be  much  more  relevant  to  you 
when  you're  actually  buying  one  than  if  you  see  it 
later  in  your  e-mail." 

As  was  the  case  with  Amazon's  purchase  of 
Alexa  Internet,  privacy  issues  in  the  wallet  space 
will  likely  come  to  the  fore  if  acquisition  activity 
heats  up.  Consider  this  hypothetical  scenario: 
Yahoo  purchases  Gator  and  suddenly  the  portal 
has  data  on  what  a  whole  slew  of  people  are  doing 
on  the  Net.  If  it's  not  careful  about  how  it  uses  that 
data  and  what  it  tells  consumers,  it  could  run  into 
the  same  problems  as  Amazon. 

Gator  hasn't  said  that  Yahoo  or  anyone  else  is 
interested  in  buying  the  company  at  this  point. 
But  with  2  million  users  and  growing  fast,  odds  are 
that  a  day  will  soon  arrive  when  someone  comes 
calling.  In  fact,  Gator's  beady  little  eyes  will  proba- 
bly know  they're  there,  even  before  they  knock,  ses 
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The  PROFILERS: 


Getting  Personal 

E-businesses  and  advertisers  are  continually  searching  for  new  ways  to  personalize  the  Web  experience  and  attract  new  customers. 
Consumers,  meanwhile,  are  increasingly  concerned  about  controlling  their  personal  information  on  the  Internet.  Fueling  the  privacy  race 
is  a  variety  of  companies  that  offer  software  and  Web-based  applications  that  serve  both  needs.  The  following  is  a  rundown  of  some  of 
the  services  that  are  currently  on  the  market,  and  others  that  soon  will  be.  -Jenny  Oh 


H'ViViff  .  .    . 

BH55 

KHH23I 

Aiexa 

Alexa's  downloadable  navigational 

Free  to  consumers. 

5  million  downloads  of  Alexa's 

www.aiexa.com 

bar  tracks  and  aggregates  users'  Web 

navigational  bar;  250,000 

San  Francisco 

visits  and  provides  a  Related  Links 
service.  Owned  by  Amazon.com,  the 
company  also  offers  a  beta  version  of 
zBubbles,  a  product-recommendation 
guide. 

downloads  of  zBubbles. 

Andromedia 

LikeMinds  personalization  software 

Starts  at  $25,000  for  50,000 

More  than  120  customers, 

(acquired  by  Macromedia 

aggregates  information  provided  by 

users  and  can  go  as  high  as 

including  the  Boston  Herald, 

in  October  1999) 

Web  visitors  and  makes  product  rec- 

$100,000. 

Cinemax,  E- Trade,  Levi 

www.macromedia.com 

ommendations  based  on  data  collect- 

Strauss, Sun  Microsystems 

San  Francisco 

ed  from  "like-minded"  users. 

and  the  U.S.  Postal  Service. 

' 

Co  re  Metrics 

ELuminate  Web-based  application 

Plans  to  charge  a  monthly 

Service  will  go  live  in  mid- 

www.coremetrics.com 

tracks  and  analyzes  consumers' 

service  fee. 

April. 

San  Francisco 

browsing  and  buying  behavior. 

Doubleclick 

DART  technology  profiles  users  based 

CPM  rates  vary  depending  on 

Doubleclick  Network  serves 

www.doubleclick.com 

on  the  ads  they  click.  Boomerang 

whether  the  advertiser 

over  11,000  sites,  including 

New  York 

technology  tracks  product  and  service 

belongs  to  the  Doubleclick 

Kelley  Blue  Book,  Thomson 

preferences  of  consumers  visiting  any 

Network  and  the  number  of 

Financial  interactive  and 

of  Doubleclick  Network's  750-plus 

targeting  filters. 

MindSpring. 

sites  and  creates  a  list  of  frequent 

buyers  or  previous  visitors  for  ad- 

vertising. Through  its  merger  with 

Abacus,  Doubleclick  offers  consumer 

purchasing-behavior  information  to 

marketers. 

'% 

Engage  Technologies 

ProfileServer  technology  tracks  cus- 

Pricing for  ProfileServer 

1,400  customers,  including 

www.engage.com 

tomer  preferences  at  specific  Web 

varies.  Cost  for  AudienceNet 

CNET,  NetNoirand  Image 

Andover,  Mass. 

sites.  AudienceNet  tracks  users' 
browsing  habits,  then  draws  on  its 

isCPM-based. 

Networks.  This  figure  also 
includes  users  of  Engage  ser- 

.;3g 

database  of  42  million  demographic- 

vices  and  products  other  than 

i 

based  profiles  to  deliver  targeted  ads. 

those  mentioned  here. 
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ftimeria 

SuperProfiie  technology  lets  consumers 

SuperProfiie  is  free  to  individ- 

Scheduled to  ship  in  April. 

^vvw.lumeria.com 

customize  and  selectively  share  their 

uals.  Lumeria  charges  an 

Berkeley,  Calif. 

personal  profiles  with  Web  businesses. 

undisclosed  ad  rate  to  busi- 

The Lumeria  Ad  Network  delivers  ads 

nesses. 

based  on  consumers'  profiles  and  pays 

consumers  for  each  click-through. 

ptch  Logic 

TrueMatch  technology  uses  cookies 

CPM  rate  varies. 

400  customers,  primarily 

livw.maitrilogic.com 

to  determine  demographic  informa- 

advertisers. This  figure 

lestminster,  Colo. 

tion  about  a  Web  surfer,  then  uses 

includes  customers  of  other 

MatchLogic's  database  of  72  million 

MatchLogic  products  as  well 

profiles  to  deliver  targeted  ads. 

as  TrueMatch. 

let  Perceptions 

E-commerce  and  Ad  Targeting  software 

The  annual  license  fee  for 

156  customers,  including 

iww.netperceptions.com 

generate  profiles  through  direct  cus- 

E-commerce starts  at  $75,000 

Dean  &  Deluca,  eToys, 

HI  Prairie,  Minn. 

tomer  queries  and  by  monitoring 

for  up  to  50,000  users.  Annual 

HomeGrocer,  Lycos  and  Virgin 

browsing  habits.  The  software  then 

license  fee  for  Ad  Targeting 

Online  Megastore. 

makes  product  recommendations  and 

begins  at  $25,000  for  sites 

delivers  ads. 

serving  up  to  1  million  ads  per 
month  and  goes  as  high  as 
$250,000  for  sites  serving  500 
million  ads  per  month. 

jprsonify 

Essentials  server  software  identifies 

Fee  for  Essentials  starts  at 

75  customers  including 

ww.personify.com 

patterns  in  consumers'  Web  behavior 

$5,500  per  month.  Proactive 

Drkoop.com,  J.  Crew,  Onsale 

Par  Francisco 

and  integrates  data  from  user  registra- 
tions and  from  offline  databases.  Pro- 

monthly fee  starts  at  $3,500. 

and  Patagonia. 

p 

active  e-mail  app  generates  targeted 
e-mail  lists  based  on  the  same  data. 

pedictive  Networks 

Predictive  Networks'  technology 

N/A 

Internet  service  providers  and 

Kww.predictivenetworics.com 

enables  ISPs  to  track  the  ads  and  Web 

advertising  agencies. 

loston 

sites  that  consumers  click,  then  aggre- 

gate their  preferences  to  deliver  highly 
targeted  advertising. 

pyaSeek 

Persona  technology  allows  consumers 

Free  to  consumers. 

N/A 

Bw,privaseek.com 

to  customize  and  selectively  share 

Poomfield,  Goto. 

their  personal  profiles  with  Web  busi- 

nesses; functions  as  an  e-wallet. 

Kwin 

WinWin  technology  delivers  ads  based 

Advertisers  pay  anywhere 

Hook  Media. 

gww.winwin.com 

on  demographic  and  psychographic 

from  1  cent  to  $1  per  ad. 

||osfon 

information  provided  by  individual 

depending  on  the  level  of 

consumers. 

interaction  with  the  consumer. 

KJlSlogy 

Orby  technology  creates  profiles  by 

Orby  is  free  to  consumers. 

Scheduled  to  launch  in  mid- 

fe^younologv.com 

tracking  click-throughs  and  directly 

Total  Perspective  costs  $1,500 

March.  Customers  include  the 

lll>rork 

asking  consumers  about  their  prefer- 

per site  server  plus  monthly 

Knot,  Travelbreak.com  and 

mitf: 

ences.  Total  Perspective  for  e-business- 

fees ranging  from  $2,250  to 

Fuxito  Worldwide. 

es  tracks  Orby  users  to  create  a  person- 

$60,000 depending  on  the 

MBr  1  ■ 

alized  shopping  experience.  Smart- 

number  of  registered  Orby 

Sense  Server  links  consumer  profiles 

users.  There  is  a  $9,995  site 

to  business  suppliers  and  partners  in 

license  fee  to  link  to  Smart- 

|;__ 

real  time. 

Sense  Server. 

Standard. 
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'When  these  monitoring  systems  are  exposed  to  the  sunshine,  companies  seem  to  immediately  stop  doing  it. 

Richard  M.  Smith,  software  expert  and  Internet  privacy  defender 

Tracking  Net's  prying  eyes 


ON-LINE  WATCHDOG 


Cybersleuth  aims  to  expose 
surveillance  of  consumers 


Richard  M.  Smith  has  unmasked  techniques  employed  by  companies  to 
invisibly  retrieve  information  from  Internet  users'  computers. 


BROOKUNE.  Mass  —  Richard  M. 
Smith  is  a  software  expert  who  doesn't 
fully  trust  his  own  kind.  So  he  lias 
launched  a  personal  crusade  to  expose 
technology  practices  that  threaten  the 
privacy  of  millions  of  Internet  users. 

The  retired  co-founder  of  a  maker  of 
specialized  software  for  industry,  he 
has  a  growing  reputation  as  one  of  the 
Internet's  premier  privacy  defenders. 
He  has  essentially  become  the  Techie 
Avenger  for  millions  of  less  savvy  Inter- 
net users  who  surf  unaware  of  how 
much  of  their  personal  information  is 
silently  being  gathered. 

Smith  has  unmasked  techniques  em- 
ployed by  some  of  the  Internet's  best 
known  companies— including  Micro- 
soft Corp.  and  Real  Networks— to  invis- 
ibly retrieve  information  from  Internet 
users'  computers  in  ways  those  firms 
didn't  fully  disclose  until  Smith  raised 
questions. 

He  discovered  that  software  made  by 
a  subsidiary  ofAmazon.com.  Alexa  !u. 
ternet.  ostensibly  designed  In  help  In- 
ternet shoppers  find  the  best  deals  and 
product  information,  also  secretly  gath- 
ered personal  information  on  the  user. 

Smith,  46,  Tiled  a  complaint  with  the 
Federal  Trade  Commission  after  dis- 
covering that  Alexa's  zBubbles  soft- 
ware harvested  information  about  his 
activities  on-line  and  transmitted  it 
back  to  Alexa. 

Besides  his  email  and  physical  ad- 
dress. Alexa's  software  surreptitiously 
recorded  his  sister's  phone  munber 
when  he  used  his  computer  to  call  her.  It 
noted  his  purchase  of  a  Boston-to  Las 
Vegas  airline  ticket,  the  DVDs  he  con- 
sidered buying  horn  an  on-line  retailer 
and  the  information  he  typed  In  to  con- 
firm his  teenage  daughter's  flight  home 


from  Philadelphia 

All  this  was  dune  without  notice  to 
him  from  Alexa  that  his  personal  data 
was  being  retrieved,  he  said. 

"Itwasoneoftbemore  intrusive  pin 
es  of  software  I've  ever  seen,"  said 
Smith. 

Said  Brewster  Kahle,  Alexa's  chief 
executive:  "Our  users'  privacy  is  of  the 
utmost  Importance  to  us,"  hut  declined 
further  comment,  citing  the  complaint 
before  the  FTC. 

Interviewed  in  the  rambling  frame 
house  in  this  Boston  suburb  that  he 
shares  with  his  Russian-born  wife, 
teenage  daughter  and  standard  poodle. 
Smith  said  his  mission  is  a  simple  one. 

"I  want  to  show  how  much  monitor- 
ing is  being  done  so  we  can  make  good 
decisions  about  whether  we  want  this 
or  not,"  Smith  said  in  the  attic  room 
where  he  does  most  of  his  detective 
work.  "If  we  talk  tomarketingfolks  who 
are  involved,  they  say:  'Oh.  there's  no 
problem  here.  Its  all  for  your  own  good. 
Arid  don't  ask  loo  many  questions.' 
What  I  like  to  do  is  ask  all  the  ques- 
tions," he  said. 

The  Web  privacy  problem.  Smith 
said,  has  two  fathers.  Internet  compa- 
nies often  aiegiven  high  stock  values  in 
part  because  of  the  personal  informa- 
tion they  have  on  current  and  prospec- 
tive customers.  So  (here  is  great  incen- 
tive lor  them  to  collect  such  data,  he 
said. 

The  other  is  that  software  engineers 
by  nature  like  to  do  their  own  thing 
Software  writers  "sort  of  create  their 
own  little  world  with  software  They 
write  the  rules.  The  last  thing  in  the 
world  they  want  to  be  told  is  what  to 
do,"  Smith  said. 

He  foresees  legislators  eventually 
passing  laws  that  tell  software  compa- 
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nies  what  kind  of  information  they 
can  and  can't  "transmit  up  and 
down  the  wire,"  without  the  users' 
informed  consent,  as  well  as  ethical 
training  for  software  developers, 
he  said. 

Smith,  who  sits  on  the  Federal 
Trade  Commission's  *  Advisory 
Committee  on  On-line  Access  and 
Security,  started  flunking  about  In- 
ternet security  years  ago  when  he 
ran  Phar  Lap  Software  Inc.,  a  Cam- 
bridge, Mass.,  firm  named  for  a  fa- 
mous Australian  racehorse. 

He  focused  mainly  on  software 
hugs  that  left  computers  vulnerable 
to  hackers  and  viruses.  It  was 
Smith  who  last  year  uncovered  the 
name  of  the  Melissa  e-mail  virus' 
creator,  David  L.  Smith,  and  passed 
it  along  to  authorities. 

A  year  ago,  he  turned  his  atten- 
tion to  Internet  privacy.  The  contro- 
versy over  Intel  Corp.'s  plan  for  a 
serial  number  in  its  Pentium  III  mi- 
crochip processors  that,  theoreti- 
cally, would  make  possible  (racing 
millions  of  computers  over  the  In- 
ternet, made  him  wonder  what  oth- 
er tracking  might  already  be  occur- 
ring.        _ 


He  found  that  Microsoft  Word, 
the  nation's  most  popular  word 
processor  program,  embedded  a 
hidden  electronic  identifier, 
unique  to  each  computer,  on  Word 
documents. 

That  globally  unique  identifier, 
as  it  is  called,  was  sent  back  to  Mi- 
crosoft when  consumers  registered 
their  Microsoft  software,  Smith 
learned. 

Thus,  the  personal  information 
people  provided  upon  registration 
could  theoretically  be  linked  to  a 
particular  document  written  in 
Word. 

"I  said  'Holy  cow.  this  is  bad,'  " 
Smith  recalled.  "Not  that  anybody 
was  using  all  this  stuff,  but  this  in- 
teresting little  surveillance  system 
was  all  in  place"  if  ever  someone 
wanted  to  use  it. 

Smith  contacted  Microsoft.  The 
Redmond,  Wash. -based  software  gi- 
ant "right  off  the  bat  realized  this 
was  not  a  good  situation,"  Smith 
said.  The  company  stopped  new 
versions  of  its  software  from  stamp- 
ing documents  with  the  unique 
numbers. 

Carol  Sacks,  a  Microsoft  spokes- 
woman, said,  "The  fact  is,  Richard 
is  a  technical  expert,  and  we  respect 
what  he  does.  We  believe  [his  ef- 
forts] are  intended  to  help  strength- 
en consumers'  privacy  protection, 


and  this  is  an  important  issue  to  all 
of  us." 

Last  October,  Smith  found  soft- 
ware by  Real  Networks,  the  Seattle- 
based  company,  doing  something 
similar.  Real  Networks'  software 
compresses  and  decompresses 
large  sound  and  video  files  for 
transmission  over  the  Internet.      ' 

Another  feature  of  the  company's 
Real  Jukebox  software  allows  peo- 
ple who  listen  to  compact  discs  on 
their  computers  to  transfer  music 
from  the  discs  to  their  hard  drives. 

Smith  detected  that  when  he 
placed  a  compact  disc  into  his  com- 
puter, the  Real  Jukebox  software 
automatically  transmitted  his  ma- 
chine's unique  identifier  and  his 
musical  selections  to  Real  Net- 
works. 

Since  Real  Networks  had  his 
name  and  other  personal  informa- 
tion from  his  registration,  "it  put 
them  in  a  position  of  being  able  to 
build  a  database  of  what  CDs  I  was 
listening  to,"  Smith  said.  He  alerted 
the  media  and  a  controversy  en- 
sued. In  response,  Real  Network 
disabled  the  technology. 

Real  Networks  didn't  challenge 
Smith's  facts,  just  his  conclusions. 
"He  seemed  to  assume  that . . .  Real 
Networks  was  monitoring,  and  that 
was  not  the  case,"  said  Allen  Mayer, 
a  Real  Networks  spokesman. 


When  Smith  went  public,  Real 
Networks  had  already  planned  a 
software  fix  to  stop  the  transmit- 
ting of  the  personal  information 
and  update  its  privacy  policy,  May- 
er said.  Smith  had  criticized  the  pri- 
vacy policy  posted  on  the  compa- 
ny's Web  site  for  not  mentioning 
the  practice.  "There's  no  question 
that  Smith's  work  sped  up  the  time- 
table," Mayer  said. 

Smith  commented,  "What's  in- 
teresting to  me  is  when  a  lot  of  these 
monitoring  systems  are  exposed  to 
the  sunshine,  companies  seem  to 
immediately  stop  doing  it." 

Smith  also  triggered  a  number  of 
class  action  lawsuits  against  Real 
Networks.  "I'm  getting  a  lot  of  calls 
from  lawyers  these  days,"  said 
Smith,  who  refuses  to  be  an  expert 
witness  for  plaintiffs:  it  would  taint 
his  efforts,  he  said.  State  attorneys 
general  and  lawyers  for  companies 
that  hope  to  avoid  running  afoul  of 
him  have  also  called  seeking  ad- 
vice. 

He  has,  however,  signed  on  as  a 
paid  consultant  on  Internet  privacy 
issues  to  a  company  he  declined  to 
name.  While  he  made  enough  mon- 
ey to  be  comfortable,  he  does  not 
have  the  megawealth  of  some  Inte 
net  entrepreneurs.   "I'm  kind 
jealous.  I  can  only  retire  for  a  yea 
he  said  with  a  laugh. 
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The  Web:  Growing  by  2  Million  Pages  a  Day 


It's  impossible  to  drag  a  measuring  tape  around  cyberspace.  While 
experts  disagree  on  which  metric  is  best  for  sizing  the  Web,  every- 
one agrees  that  it's  growing  phenomenally.  Web  sites  appear  faster 
than  Starbucks  outlets,  showing  up  at  a  rate  of  more  than  4,400  per 
day.  As  of  1999  there  were  3.6  million  sites.  The  number  of  Web 
pages,  which  may  be  the  best  gauge  of  size,  has  also  skyrocketed  in 
the  last  12  months.  NEC  Research  says  there  are  around  1.5  billion 
Web  pages,  an  88  percent  increase  from  1998.  This  suggests  1.9  mil- 


lion Web  pages  are  created  each  day.  IDC  expects  the  number  to  hit 
8  billion  in  2002,  exceeding  the  world's  population. 

Domain-name  registrar  Network  Solutions  recently  said  it  regis- 
tered 4.7  million  new  domain  names  in  1999.  That's  more  than  dou- 
ble NSI's  registrations  in  1998,  and  brings  total  registrations  to 
about  8.1  million.  While  this  indicates  extraordinary  growth  and  a  lot 
of  new  sites  in  the  pipeline,  the  Online  Computer  Library  Center 

CONTINUED  ON  PAGE  176 


A  Snapshot  of  the  Web's  Size,  1999 
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Definition  of  Web-Size  Metrics 

WEB  PAGE 

A  collection  of  information  or  Web  resources, 
intended  to  be  rendered  simultaneously,  and  identi 
fied  by  a  single  uniform  resource  identifier,  or  URI. 

WEB  SITE 

A  collection  of  interlinked  Web  pages,  including  a 
host  page,  residing  at  the  same  network  location. 


Live  IP  addresses  at  any  one  time,  in  the  Domain 
Name  System,  including  Web  servers  and  access 
devices*  as  well  as  actual  machines  and  virtual  hosts. 

DOMAIN  NAME 

An  address  that  locates  any  organization  on  the 


Cumulative  Domain  Name  Registrations 
In  the  .Com,  .Net  and  .Org  Domains 


5  Al 

I    21 

i    n!    001 


!ji..!.^L.;a.:Ba.' 


1993   1994   1995   1996   1997   1998   1999 


3.6  Million  Sites  TdoAv 


Web  Site  Growth  Trend 


1997  1998  1999  2000  2001 

Online  Computer  Library  Center    -  -  Alexa  Internet 


MbRV^^tHANNbPiiBtaboi 


Internet  Web  Page  Trend  1997-2002 

ffigssig] 

10,000 1 
8,000 

"...    j 

I 

8,034 

> 

6,000 

'I.9P.4/ 

r 

?    4,000  i 
°           -■•- 
3     2,000 

I      o! 

bops* 

300 
1997 

.  3,2m, 

925     ;    1,679^-- 
1998       1999        2000 

2001 

2002 

.  tz 

NEC  Research    --  IDC      | 

MARCH  6,  2000 


'.thestandard.con 


METRICS 


&^ 


The  Web:  Growing  by  2  Million  Pages  a  Day 


CONTINUED  FROM  PAGE  174 

found  only  3.6  million  sites  in  September,  less  than  half  of  what  NSI 
has  registered  to  date.  Moreover,  the  OCLC  reports  that  almost  one- 
third  of  Web  sites  are  either  transitory  or  unfinished,  suggesting 
that  a  large  portion  of  the  registered  names  are  just  placeholders. 

The  Internet  Software  Consortium's  January  crawl  of  the  Web 
found  the  number  of  Internet  domain  hosts,  or  live  IP  addresses  at 
any  one  time,  has  climbed  to  72.4  million,  an  increase  of  67  percent 


in  the  last  year.  Top-level  domains  are  experiencing  growth  across 
the  spectrum,  with  the  .corns  seeing  a  105-percent  boost.  Although 
its  lead  has  slid  4  percent  since  1998,  the  U.S.  is  still  the  definitive 
leader  in  site  ownership,  with  55  percent  of  all  public  sites.  The 
Western  states  account  for  the  majority  of  those  sites.  But  only  a 
handful  of  sites  get  any  attention:  Alexa  Internet  found  that  80  per- 
cent of  Web  traffic  goes  to  only  15,000,  or  0.4  percent,  of  all  sites.  - 
David  Lake  (davidl@thestandard.com) 


Internet  Host  Growth  by  Domain 
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.com/Commercial 

12,140,747 
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.net/Network 
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16,853,655 

90% 
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.jp/Japan 
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56% 

.uk/United  Kingdom 

1,423,804 
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34% 

.us/United  States 
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20% 
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29% 

.ca/Canada 

1,119,172 
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49% 

.au/Australia 

792,351 

1,090,468 

38% 
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744,285 

959,827 

29% 

Other 

7  052  575 

11,007,642 

56% 

1999  Distribution  of  3.6  Million  Web  Sites 
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U.S.  Web  Sites  by  Region  by  Site  Owner 
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Peeping  .Tom 


4C     A    t  Amazon.com,  we  are  com- 
YA   miaed  lo  protecting  your 
X    jLpnvacy...  In  connecuon  with 
your  use  of  the  service,  we  collect  web- 


site usage  data  and  traffic  pattern  dara.. 
with  respect  to  your  activity  both  witR- ' 
in  and  across  websites — all  of  which 
remain  anonymous." 

Some  people  might  think  it's  qonve-    . 
nient  to' go  shopping  at  Amazon.com 
and  be  greeted  with  recommendations: 
"Hey,  you  bought  a  Dr.  Seuss  book  on 
your  previous  visit — you  might  want  to 
check  out  'The  Best  of  Elmo'  on  DVD  or 
.the  Infant  Klackeroo  from  PlayskooL"    - 
'.However,  Amazon's  efforts  to  "cus- 

.  tomize"  and  cater  to  shoppers  are- 
becoming  a  little  too  friendly  for  some 

j  Internet  users.  A  pair  of  recent  com-  

'plaints — one  filed  with  the  Federal 
Trade  Commission  m  Washington, 
DC,  and  another  filed  in  San  Francisco 
federal  court — allege  that  an  Amazon     • 
subsidiary,  Ajexajnternet,  uses  software 


to  secretly  collect  personal  data  on  Web 
users  and  funnel  it  back  to  Amazon. 
"I've  never  seen  a  piece  of  software 
that  was  so  talkative  about  what  you're 
doing  and  who  you  are,"  says  Richard 
M.  Smith,  the  Boston-based  software 
designer  who  filed  the  FTC  complaint. 
Smith's  fundamental  concern,  shared 
by  other  pnvacy  advocates,  isn't  simply 
that  Amazon  is  amassing  huge  amounts 
of  personal  data  (foregoing  anonymity, 
despite  the  online  pnvacy  statement), 
.but  that  there  arc  no  government  regu- 
lations in  place  to  prevent  the  company 
and  others  like  it  from  selling  the  infor- 
mation to  health  insurers,  credit  compa- 
nies, or  even  potential  employers. 

"Companies  make  all  sons  of  pledges 
about  policy  today,  but  that-doesn'l 
mean  they  can't  change  their  mind  or 
get  bought  tomorrow  by  a  company' 
With  a  different  policy,"  he  says. 

"These  companies  have  stated  rules," 
agrees  Evan  Hendricks,  editor  of  the 
Washington,  DC. -based  newsletter 
Privacy  Times,  "but  we  go  through  one 
by  one  and  find  serious  contradictions  - 
with  their  voluntary  policies." 
(Hendricks  points  out  that  several  com- 
panies, including  Microsoft  and  Real 
Networks,  have  been  "Smiffed" — 


sniffed  out  by  Smith — for  secretly  gath- 
ering information  on  people.) 

Raising  red  flags  about  nosy  software 
companies  is  crucial  If  the  Internet,  as 
predicted,  becomes  the  central  market- 
place of  the  21st  century,  companies 
will  not  only  be  able  to  track  con- 
sumers in  an  unprecedented  way,  but 
they'll  also  be  under  competitive  pres- 
sure to  use  the  data  to  their  advantage. 

If  the  government  doesn't  step  in  to  reg- 
ulate e-commcrcc,  pnvacy  experts  argue, 
the  Internet  will  surely  become  a  data- 
trading  bonanza  for  private  industry. 

In  Europe,  comprehensive  data-pro- 
tection laws  give  citizens  cause  for  legal 
action  when  private  companies  linker 
with  or  trade  personal  information  but, 
other  than  preventing  cable  companies 
and  video  stores  from  revealing  what 
tapes  you  rent,  no  analogous  laws  exist, 
'in  the  United  States.      ■  - 

Both  Smith's  complaint  and  the  law- 
suit filed  J3n.  6  in  federal  court  by  San 
Diego  law  firhi-Milberg  Weiss  Bershad  ' 
Hynes- & Lerach  fJL-P.focus  on  Amazon 
subsidiary  Alexa  Intem'et,  Amazon 
bought  Alexa  last  April  lor  S245.5  mil- 
lion in  stock  as  part  of  its  "customiza- 
tion" strategy  to  lake  advantage  of 
Alexas  data-mining  software  expertise. 


'  The  company's  software  alerts  Web 
surfers  to  other  sites  that  may  be  of  inter- 
est to  them.  The  software,  which  Web 
users  download  and  attach  to  their 
browsers,  does  this  by  following  the  cyber 
paths  of  millions  of  Internet  shoppers, 
analyzing  where  they  go,  detecting  pat- 
icms,  and  reporting  back  lo  individual 
consumers  with  browsing  tips.  Amazon  is 
using  Alexas  updated  version,  zBubbles, 
which  goes  so  Jar  as  to  make  comparative 
shopping  recommendations.  . 

The  catch,  according  to  Smith's -FTC 
complaint,  is  that  Alexas  technology,  with- 
out asking  for  consent,  simultaneously 
sucks  up  personal  data  (names,  addresses, 
phone  numbers,  e-mail  addresses)  and 
monitors  exactly  what  a  person  searched 
for  at  a  given  website,  then  relays  that  info 
back  to  Alexa  and  Amazon. 

Smith  knows  what  he's  talking  about 
because  he's  used  his  own  software  to 
spy  on  the  spies.  Cruising  the  Web  to 
test  out  zBubbles,  for  example,  Smith 
found  that  the  program — in  violation 
of  its  own  stated  policy — relayed  his 
address  to  Alexa  and  Amazon. 

Smith  ran  the  same  test  on  Alexa  basic  ' 
software  and  found  that  his  e-mail 
address,  his  home  address,  a  plane  reser; 
varion,  and  his  sister's  name  and  phone 
number  were  sent  to  an  Alexa  Web  serv- 
er without  his  permission.  ' 

In  a  letter  to  Amazon  CEO  Jeff  Bezos, 
Smith  wrote,  "No  software  package 
should  ever  be  transmitting  this  kind  of 
personal  information  lo  another  party 
without  the  knowledge  and  consent  of 
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a  user....  1  have  been  looking  at  privacy 
'  problems  in  other  software  pack-     •.■" 
ageS:..[and]  the  privacy  problems  with 
the  zBubbjes  and  Alcxa  are  the  worst     . 
by  far  of  all  of  the  software  packages 
that  1  have  investigated." 

The  privacy  concerns  that  Smith  raises 
about  Alexa  software  are  highlighted  in 
the  Milberg  Weiss  suit,  in  which  plaintiff.. 
Joel  D.  Newby  claims  Alexa  used  its"  *  < , . 
"secret  information-gathering  capacity" 
to  "shadow"  his  Internet  use,  collect 
personal  data,  and  pass  it  olf  to  parent 
company  Amazon.com.  ,<   .; 

"This  secret  capacity  works  as  a 
shadow  of  the  users  Internet  activity" 
the  complaint  stales,  "providing  Alexa 
and  Amazon.com  with. ..defendants'  . 
personal  and  confidential  data  about 
its  users'  activities  on  the  Internet." 

The  suit  is  intended  as  a  class  action 
for  all  Alexa  users  and  seeks  $1,000 
per  plaintiff  in  damages.  If  successful, 
the  suit  could  cost  Amazon  millions. 
When  news  got  out  last  week  of  the 
legal  filing,  Amazon  stock  tumbled  6 
percent,  to  $65.56. 

Amazon.com  did  not  return  calls  from 
this  reporter.  Alexa  Internet  could  not 
be  reached  for  comment.  However,    „„-_, 
Smith  says  Alcxa  told  him  that  while 
their  software  does  pick  up  personal 
information,  the  company  .doesn't  use  it. 

"That's  the  'I  didn't  inhale'  defense," 
Smith  scoffs.  A 

Freelance  writer  Josh  Feit  uses  his 
telescope  just  to  look  at  the  sky.     //' 


12A  —  305  MAGAZINE 

BUSINESS  2.0 

Brisbane  CA 


MARCH  2000 


37ff.  P'\ 


p— 


Careless 
and  Shareless 

Stock  options  are  today's  funny  money,  used  to  pay  for  every- 
thing from  haircuts  to  office  space,    by  Constance  loizos 


llplfe,.   venture  capitalists  on  the  same  after- 
Wm&t?   iiuon  last  October,  Nick  Hal.sey 

stylist.  "Can  you  see  me  this  morning?"  he 
asked  anxiously.  She  couldn't,  but  the 
shaggy  39-year-old  president  and  CEO  ol 
Searchbutton.com,  a  year-old  search  engine 
company  in  Mountain  View,  Calif.,  wouldn'r 
take  no  for  an  answer. 

"Fit  me  in  today  and  I'll  give  you  10  shares 
of  my  company,"  he  blurted.  An  hour  later, 
he  was  saddled  in  her  salon  chair. 

In  the  Age  of  Easy  Money,  everyone  and 
their  gardener  wants  a  piece  of  the  next 
Internet  startup  on  the  slim  chance  that  it 
could  morph  into  a  blue-chip  multinational. 
Even  Nei  entrepreneurs  widi  barely  their  firs! 
round  of  financing  secured  are  brazenly  scat- 
tering their  paper  wealth. 

Apportioning  shares  to  "friends  and  family" 
is  not  new.  For  some  time,  companies  have 
doled  out  stock  ro  consultants  and  customers 
who  sign  up  on  their  Websites.  East  year,  for 
the  first  time,  announced  plans  by  two  start- 
ups— medical  portal  DoctorSurf.com  of 
Eargo,  Fla.,  and  online  retailer  YouNerwork 
of  Manhattan — to  give  away  registcicd  sh.ucs 
to  Web  visitors  who  sign  up  lor  a  company's 
service  were  "declared  effective"  by  the 
Securities  and  Exchange  Commission. 

These  clays,  however,  the  pool  of  equity 
chasers  has  broadened  to  recruiters,  lawyers, 
landlords,  building  contractors,  and  beyond, 
all  of  whom  are  asking  for  a  piece  of  the 
action  from  the  startups  they  serve. 
Delivering  on  those 
rcqtic 

down 


s,  unlike  any 

has  become  a 

ghi  necessity, 
say  the  companies' 
founders. 

Steven  Eee,  CEO  of 
San  Francisco-based 
online  shopping  site 
Basement  com,  whicl 
November  and  has  $2.3  million  in  seed  capi- 
tal, says  he's  run  up  against  some  larger  ven- 
dors who  would  only  be  willing  to  sell  their 
goods  via  his  company's  Websiic  if  given 
stock.  "They  say,  'Why  do  we  want  to  give 
great  deals  ro  your  customers  when  demand 
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:d  shares 

?se  offering  is 
registered  wild  ihe  SEC 
Unregistered  shores  are 
created  ol  a  company's 
founding  Pre-lPO  com- 
panies often  use  these 
shores  lo  courl  potenlial 
employees  and  oulsideis 
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"The  earlier  stage  you  are,  the  more  likely 
you  are  to  use  options  as  a  bartering  tool/ 
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at  your  Website  doesn't  even  exist  yet?'  It's 
just  really  difficult  to  motivate  them  with 
[Basement's  services]  alone,"  he  shrugs. 

Simply  put,  service  providers  these  days 
are  more  keen  on  risk  and  reward  than  the 
security  that  charging  good  old-fashioned 
cash  affords.  "Everybody  is  looking  to  get 
in  on  the  Next  Big  Thing,"  says  Forrester 
Research  analyst  Jaime  Punishill.  "They 
always  have  been,  but  I'm  not  sure  as 
many  companies  have  held  the  promise  of 
delivering  good  returns  at  any  other  time 
in  the  past." 

Show  me  the  equity 

It's  not  as  if  the  entrepreneurs  are  being  held 
at  gunpoint,  though,  especially  those  with 
newly  formed  outfits.  Despite  the  nearly 
$2.9  billion  venture  capitalists  forked  out  to 
early-stage  information  technology  firms  in 
1998,  according  to  VentureOne,  and  despite 
the  innumerable  angel  investors,  investment 

tinkers,  and  institutional  investors  flush 
ith  seed  money,  to  many  startup  founders 
cash  remains  a  far  more  precious  commodity 
than  options. 

R.  Nuri  Otus,  founder  of  San  Carlos, 
Calif-based  AuctioNet.com,  which  sets  up 
and  maintains  Internet  auction  services,  says 
the  $1  million  in  funding  his  company  has 
received  can  only  be  stretched  so  far. 

"We  do  what  we  can  to  preserve  precious 
cash  flow.  Right  now,  using  options  is  the 
most  attractive  way  of  creating  relationships 
with  clients  and  finding  strong  employees." 

Indeed,  despite  the  exuberance  of  investors 
over  all  things  Internet,  not  all  companies 
proceed  down  their  planned  paths.  Some 
do  better  than  expected;  others  take  a  dive 
before  reaching  the  heights  outlined  in  their 
business  plans,  most  of  which  require  long 
burn  rates. 

Says  Searchbutton's  Halsey,  "The  earlier 
stage  you  are,  the  more  likely  you  are  to 
use  options  as  a  bartering  tool.  Once  we 
close  our  next  venture  round,  we'll  stop 
distributing  them  as  freely.  But  right  now 
nsh  is  king."  (See  "Choking  on  Cash," 
(in.  '00,  p60.) 

Furthermore,  insist  many,  money  won't 
buy  them  valuable  resources,  such  as  loyalty. 
A  growing  number  of  companies,  for  exam-' 


pie,  have  begun  using  options  to  cultivate  a 
devoted  community  of  customers  or  devel- 
opers. A  famous  example  involving  registered 
shares  was  that  of  Linux  developer  and  dis- 
tributor Red  Hat,  which  last  August  offered 
4,000  members  of  its  community  of  devel- 
opers an  opportunity  to  access  800,000  of  its 
6  million-share  offering  that  was  part  of  its 
directed  shares  program  at  a  pre-IPO  price. 
(However,  less  than  half  responded.) 

In  December,  Harris  Interactive,  an 
Internet-based  market  research  and  polling 
firm  in  New  York,  offered  its  respondents 
the  opportunity  to  buy  pre-IPO  priced 
shares  as  a  way  of  both  rewarding  them  for 
their  service  and  enticing  them  to  continue 
aiding  the  firm  in  its  research. 

Says  Ben  Black,  Harris's  vice  president  of 
Internet  business  development,  "Our  pan- 
elists are  our  business,  so  it  makes  sense  to 
make  them  owners  in  the  business." 

Similarly,  San  Francisco— based 
Coolboard.com,  a  community-building 
services  company  that  caters  to  small 
Websites,  has  begun  delivering  options  to 
community  members  who  lure  their  friends 
to  the  site.  Existing  members  have  to  hit 
certain  targets  in  terms  of  how  many  new 
members  they  attract,  but  the  payoff  is  a 
healthy  100  options. 

Give  me  options  or  give  me  death 
The  startups  are  also  using  options  to  get 
business  partners  such  as  advertising  agen- 
cies and  contractors  to  go  that  extra  mile. 
Justin  Kitch,  CEO  ofJd_om.eilsad.com,  a 
Menlo  Park,  Calif-based  builder  of  free 
Websites  for  individuals  and  small  busi- 
nesses, says  that  even  with  $22  million  in 
two  rounds  of  venture  funding,  he  still 
prefers  to  give  Homestead's  San  Francisco 
ad  agency,  Swirl  Advertising,  equity  as 
well  as  cash. 

"We're  trying  to  get  them  to  think  about 
Homestead  in  the  long  term,  and  not  with  a 
cash  bonus  based  on  some  goal  that  we  set 
that  will  become  irrelevant  in  six  months," 
Kitch  says.  He  also  has  sweetened  relations 
with  a  contractor  who  developed  two  techni- 
cally difficult  office  buildings  for  Homestead 
by  giving  the  contractor  some  shares.  "They 
were  willing  to  design  the  buildings  creative- 


ly and  front  a  lot  of  money  because  of  the 
options." 

Options  have  also  quickly  become  a  way 
to  induce  outsiders  into  becoming  insiders. 
The  logic:  In  an  increasingly  competitive 
landscape,  if  a  company  doesn't  offer  options 
in  return  for  recruitment  tips,  someone  else 
will.  "We  couldn't  get  the  same  results  with 
cash,"  says  Lee  of  Basement,  which  already 
gives  away  between  250  and  1,000  shares  in 
exchange  for  employee  referrals  and  is  com- 
pensating its  interim  CTO,  a  former 
USWeb/CKS  director  of  technology,  partly 
in  options.  "He's  far  more  galvanized  by 
stock,"  says  Lee,  without  a  hint  of  derision. 
Epinions.com,  a  Mountain  View,  Calif. - 
based  community  site  that  asks  members 
to  review  everything  from  SUVs  to  ski 
resorts,  also  parcels  out  options — 500 — 
every  time  an  acquaintance  refers  someone 
who  is  later  hired. 

Professional  re.cruiters_are  on  board,  too. 
Josh  Duhl,  CEO  ofCoolboard.com  relies  on 
Monday  Technology  Solutions,  Axis  Tech- 
nology, and  Heuristics  Search  to  recruit 
employees.  These  firms  are  happy  to  take  up 
to  a  third  of  their  compensation  in  shares. 
Not  that  Duhl  minds.  "It  nicely  aligns  our 
objectives,  giving  them  a  long-term  interest 
in  finding  the  right  people,"  he  says. 

Securities  attorney  Stephen  J.  Schulte,  of 
Manhattan  firm  Schulte  Roth  &  Zabel  has 
written  several  papers  on  stock  giveaways, 
and  says  the  swapping  of  options  or  stock 
for  services  has  a  /Z±S 1 

I '  1^)  www.srz.com/pub/stock.html  I 

long  history  but    v^/4 ' 

has  ballooned  along  with  the  New  Economy. 
But  some  critics  question  the  practice.  "It 
may  raise  all  sorts  of  questions  about  arm's- 
length  dealings  and  whether  or  not  the  secu- 
rities grantees  may  be  influenced  by  the 
future  possibility  of  participating  in  an  offer- 
ing," Schulte  says. 

Kitch  of  Homestead  says  he  only  uses 
equity  when  he  deems  it  vital  to  aligning  the 
interest  of  outsiders  with  that  of  his  compa- 
ny. "If  you  throw  it  around,  it  becomes  less 
valuable,  in  the  eyes  of  people  outside  the 
company  and  within.  I  can  tell  you  employ- 
ees aren't  that  excited  about  the  prospect  of 
giving  options  to  the  guy  putting  their  desks 
together." 
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"Everyone  is  focused  on  the  jackpot 
and  not  on  the  business  itself. " 


Sharing  the  pain 

Naturally,  the  options  don't  always  pan  out, 
either.  While  Melody  Kean  Haller,  president 
of  San  Francisco  PR  firm  Antenna  Group, 
has  made  millions  by  accepting  equity  in 
lieu  of  cash  for  her  company's  services — 
some  big  wins  include  Alexa  Internet,  Ask 
Jeeves,  and  WhoWhere — she  has  also  lost 
out.  Client  Vivid  Travel  Network,  which 
paid  half  of  her  $100,000  fee  in  equity, 
eventually  tanked.  "They  gave  it  a  good 
shot,"  she  sighs.  "You  can't  think  you're 
going  to  win  big  every  time." 

Despite  having  a  mere  $1.5  million  in 
venture  funding,  Ramana  Bodepudi,  CEO 
of  child-care  information  portal  eDaycare.com 
in  Santa  Clara,  Calif,  says  the  only  options 
he's  giving  out  are  to  full-time  employees, 
although  he  previously  considered  giving 
options  to  recruiters  when  his  company  had 
more  "cash  restraints."  "I'll  incentivize  my 
staff  with  options,  but  if  you  start  giving 
away  options  to  short-term  contractors  and 
everyone  else,  it  sort  of  defeats  the  point." 
Besides,  he  says,  "the  business  model  will 
sell  itself." 

Meanwhile,  Forrester's  Punishill  has  con- 
cerns over  the  regulatory  ramifications  that 
distributing  options  to  nonemployees  to 
outsiders  presents.  "I  bet  the  SEC  isn't  real 
psyched  about  [the  practice],"  he  says.  "They 
have  to  keep  a  careful  watch  on  who  the 
qualified,  early-stage  investor  is.  What 
makes  a  landlord  qualified  to  make  the  busi- 
ness decision  to  take  equity  in  a  startup 
rather  than  charge  rent?" 

Santa  Clara  County  Superior  Court  Judge 
Conrad  Rushing  says  no  landlords  have  shown 
up  in  his  courtroom  to  sue  over  expected  pay- 
offs gone  bad.  Nevertheless,  Rushing,  who  has 
tried  numerous  cases  involving  venture  capi- 
talists and  the  entrepreneurs  they've  financed, 
says  it's  too  hard  in  this  day  and  age  to  make 
distinctions  over  who  is  or  isn't  a  sophisticat- 
ed investor.  "We  used  to  be  able  to  make  a 
call  on  whether  they  were  sophisticated,  but 
frankly,  how  sophisticated  people  are  is  hard 
to  tell.  Sometimes  they  understand  what 
they're  involved  in;  sometimes  they  don't." 

In  fact,  SEC  spokesperson  John  Heine 
says  the  commission  is  aware  that  the  dis- 
tribution of  unregistered  shares  is  a  "time- 


honored  practice"  and  cause  for  concern 
only  if  they  are  done  in  a  way  that  violates 
securities  laws,  although  securities  laws 
don't  specify  what  is  broad  enough  to 
constitute  an  IPO.  "What  people  accept 
in  lieu  of  compensation  isn't  our  concern. 
/2lN 1   We  look  at  the  issuers  of 

(    i=)  www.sec.gov  .    .        „  . 

\zLS securities.    As  long  as  a 

public  offering  is  registered  or  eligible  for 
exemption  from  registration,  and  that 
adequate  information  about  the  company 
has  been  disseminated  to  the  public,  the 
SEC  has  little  problem  at  all  with  the 
process,  says  Heine. 

Leftovers  for  founders? 

Perhaps  the  largest  concern  about  the  prac- 
tice is  that  entrepreneurs  will  have  little  left 
for  themselves  once  investors,  and  then  cus- 
tomers, consultants,  lawyers,  and  many  oth- 
ers, collectively  take  a  big  chunk  of  the 
company.  Sky  Dayton,  founder  of  ISP 
EarthLink  and  now  co-founder  of  incuba- 
tor eCompanies,  has  grumbled  about  the 
less  than  10  percent  share  of  EarthLink  he 
was  left  with  after  investors  and  other  out- 
siders diluted  his  shares.  (EarthLink  is  now 
valued  at  $1.8  billion,  giving  Dayton  $180 
million.)  Venture  capitalist  Tim  Draper  of 
Draper  Fisher  Jurvetson  concedes  that  dilu- 
tion is  unavoidable  and  a  founder  usually  is 
diluted  the  most  in  the  first  round. 

In  any  case,  demand  for  pre-IPO  startups' 
equity  beyond  the  office  walls  is  torrid  these 
days.  "I've  given  out  options  to  our  PR 
firm,  our  graphics  firm,  our  consultants," 
says  Halsey  of  Searchbutton.  He  says  he  has 
had  "all  kinds  of  people  trying  to  get  jobs 
with  me.  They  all  know  the  option  price 
will  go  up  after  we  get  another  round  of 
financing."  Adds  Barry  Parr,  director  of  con- 
sumer ecommerce  research  at  International 
- 1    Data  Corporation: 

www.idc.com    I  . 

'     Everyone  is  focused  on 

the  jackpot  and  not  on  the  business  itself. 
It's  like  gambling,"  he  sighs. 

That  doesn't  seem  to  bother  Halsey. 
"These  are  people  who  are  betting  on  us. 
How  can  I  complain?"^ 


CONSTANCE  LOIZOS  (CLOIZOS@CRAIN.COM)  IS  A  WEST 
COAST  CORRESPONDENT  FOR  INVESTMENT  NEWS,  A  CRAIN 
WEEKLY  ,-. 
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I  Personalization 

I      Once  a  company  has  mined  your 
data,  it  can  personalize  its  online  con- 
tent just  for  you.  For  instance,  once 
you  buy  a  book  from  Amazon.com,  the 
site  combines  purchase  data  with  other 
information  it  has  gathered  about  the 
books  you've  browsed  on  the  site  to  do 
some  "upselling" — namely,  to  suggest 
other  products  it  thinks  you  might  be 
interested  in  purchasing,  based  on  your 
profile. 

Personalization  isn't  necessarily  a 
bad  thing.  It's  a  way  of  making  online 
shopping  a  little  more  like  visiting  the 
corner  store — and  yes,  it  can  point  out 
products  you  might  really  like  to  buy. 
The  problem  is  that  you  aren't  always 
given  the  chance  to  "opt  out"  of  per- 
sonalization. Many  sites  assume  you've 
"opted  in"  and  consent  to  being  pro- 
filed. But  it  ain't  necessarily  so. 

Last  August,  Amazon  caught  flak  for 
its  "purchase  circles"  which  list  the  top 
10  books  bought  by  employees  of  vari- 
ous corporations,  nonprofit  groups, 
and  government  agencies.  It  did  so 
without  asking  permission.  After  some 


Continued  on  page  28 


Continued  from  page  24 


he.it,  Amazon  announced  that  it  would 
let  individual  customers  opt  out  of 
purchase  circles  and  would  remove  any 
companies  at  their  request. 

This  wasn't  the  only  time  Amazon, 
corn's  privacy-bending  practices  made 
headlines.  In  early  January,  Amazon, 
com  and  its  AJexaJnternet  unit  were 
sued  by  a  user  who  claimed  Alexa 
secretly  captured  some  of  his  personal 
data  and  forwarded  it  to  Amazon. 
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Richard  Smith's  one-man  campaign  for  privacy 


By  FRANK  JAMES 


lichard  M.  Smith  exposed 
smpantes  silently  gathering 


Kniflht  Riaaet^Tribune 

practice  of  large 
data  on  Internet  users. 


Richard  M.  Smith  is  a  software  expert  who 
doesn't  hilly  trusi  his  own  kind.  So  he  has  launched 
a  personal'  crusade  lo  expose  technology  practices 
that  threaten  the  pnvacy  of  millions  of  Internet  us- 
ers. 

The  retired  co-founder  of  a  maker  of  specialized 
software  for  industry,  he  has  a  growing  reputation 
as  one  of  the  Internet's  premier  privacy  defenders. 
He  has  essentially  become  the  Techie  Avenger  for 
millions  of  less  savvy  Internet  users  who  surf  un- 
aware of  how  much  of  their  personal  information  is 
silently  being  gathered 

Smith  has  unmasked  techniques  employed  by 
some  of  the  Internet  s  best  known  companies  —  in- 
cluding Microsoft  Corp.  and  Real  Networks  —  to 
invisibly  retrieve  information  from  Internet  users' 
computers  in  ways  those  firms  didn't  fully  disclose 
until  Smith  raised  questions. 

He  discovered  that  software  made  by  a  subsid- 
iary of  Amazon.com.  Alexa  Internet,  ostensibly  de- 
signed to  help  Internet  shoppers  find  the  best  deals 
and  product  information,  also  secretly  gathered 
personal  information  on  the  user 

Smith.  46.  filed  a  complaint  with  the  FederaJ 
Trade  Commission  after  discovering  that  Alexa  s 
zBubbles  software  harvested  information  about  his 
activities  online  and  transmitted  it  back  to  Alexa. 

Besides  his  e-mail  and  physical  address.  Alexa's 


"What's  interesting  to  me  is  when  a 
iot  of  these  monitoring  systems  are 
exposed  to  the  sunshine,  companies 
seem  to  immediateiy  stop  doing  it." 
Richard  W.  Smith 


software  surreptitiously  recorded  his  sisters  phone 
number  when  he  used  his  computer  to  call  her.  It 
noted  his  purchase  of  a  Boston-to-Las  Vegas  airline 
ticket,  the  D\T_>s  he  considered  buying  from  an  on- 
line retailer  and  the  information  he  typed  in  to  con- 
firm his  teenage  daughter  s  flnzh!  home  from  Phila- 
delphia 

All  this  was  done  without  notice  to  him  from  Al- 
exa that  his  personal  data  was  being  retneved.  he 
said. 

"It  was  one  of  the  more  intrusive  pieces  of  soft- 
ware I've  ever  seen,"  said  Smith. 

Said  Brewster  Kahle,  Alexa's  chief  executive: 
"Our  users'  pnvacy  is  of  the  utmost  importance  to 
us."  but  declined  further  comment,  citing  the  com- 
plaint before  the  FTC. 

Smith  said  his  mission  is  a  simple  one 

"I  want  to  show  how  much  monitoring  is  being 
done  so  we  can  make  good  decisions  about  whether 
we  want  this  or  not.'  Smith  said  in  the  attic  room 
where  he  does  most  of  his  detective  work.  "If  we 
talk  to  marketing  folks  who  are  involved,  they  say: 


'Oh.  there  s  no  problem  here.  It's  all  for  your  own 
good.  And  don't  ask  too  many  questions '  What  I 
like  to  do  is  ask  all  the  questions."  he  said. 

The  Web  pnvacy  problem.  Smith  said,  has  two 
fathers.  Internet  companies  often  are  given  high 
siock  values  in  pan  because  of  the  personal  infor- 
mation they  have  on  current  and  prospective  cus- 
tomers. So  there  is  great  incentive  for  them  to  col- 
lect such  data,  he  said. 

The  other  is  that  software  engineers  by  nature 
like  to  do  their  own  thing.  Software  wnters  "sort  of 
create  their  own  little  world  with  software  They 
write  the  rules.  The  last  thing  in  the  world  they 
want  to  be  told  is  what  to  do."  Smith  said. 

He  foresees  legislators  eventually  passing  laws 
that  tell  software  companies  what  kind  of  informa- 
tion they  can  and  can't  "transmit  up  and  down  the 
wire."  without  the  users'  informed  consent,  as  well 
as  ethical  training  for  software  developers,  he  said. 

Smith,  who  sits  on  the  Federal  Trade  Commis- 
sion's Advisory  Committee  on  Online  Access  and 
Security,  started  thinking  about  Internet  security 
years  ago  when  he  ran  Phar  Lap  Software  Inc.,  a 
Cambridge.  Mass..  firm  named  for  a  famous  Aus- 
tralian racehorse. 

He  focused  mainly  on  software  bugs  that  left 
computers  vulnerable  to  hackers  and  viruses  It  was 
Smith  who  last  year  uncovered  the  name  of  the 
Melissa  e-mail  vims'  creator,  David  L.  Smith,  and 
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passed  it  along  to  authorities. 

A  year  ago,  he  turned  his  atten- 
tion to  Internet  privacy.  The  contro- 
versy over  Intel  Corp.'s  plan  for  a 
serial  number  in  its  Pentium  III  mi- 
crochip processors  that,  theoretical- 
ly, would  make  possible  tracing  mil- 
lions of  computers  over  the  Inter- 
net, made  him  wonder  what  other 
tracking  might  already  be  occurring. 

He  found  that  Microsoft  Word, 
the  nation's  most  popular  word  pro- 
cessor program,  embedded  a  hid- 
den electronic  identifier,  unique  to 
each  computer,  on  Word  docu- 
ments. 

That  globally  unique  identifier, 
as  it  is  called,  was  sent  back  to  Mi- 
crosoft when  consumers  registered 
their  Microsoft  software,  Smith 
learned. 

Thus,  the  personal  information 
people  provided  upon  registration 
could  theoretically  be  linked  to  a 
particular  document  written  in 
Word. 

"I  said  'Holy  cow,  this  is  bad,'  " 
Smith  recalled.  "Not  that  anybody 
was  using  all  this  stuff,  but  this  in- 
teresting little  surveillance  system 
was  all  in  place"  if  ever  someone 
wanted  to  use  it. 

Smith  contacted  Microsoft.  The 
Redmond,  Wash. -based  software 
giant  "right  off  the  bat  realized  this 
was  not  a  good  situation,"  Smith 
said.  The  company  stopped  new 
versions  of  its  software  from  stamp- 
ing documents  with  the  unique 
numbers. 

Carol  Sacks,  a  Microsoft  spokes- 


woman, said,  "The  fact  is,  Richard 
is  a  technical  expert,  and  we  respect 
what  he  does.  We  believe  (his  ef- 
forts) are  intended  to  help  strength- 
en consumers'  privacy  protection, 
and  this  is  an  important  issue  to  all 
of  us." 

Last  October,  Smith  found  soft- 
ware by  Real  Networks,  the  Seattle - 
based  company,  doing  something 
similar.  Real  Networks'  software 
compresses  and  decompresses  large 
sound  and  video  files  for  transmis- 
sion over  the  Internet. 

Another  feature  of  the  compa- 
ny's Real  Jukebox  software  allows 
people  who  listen  to  compact  discs 
on  their  computers  to  transfer  mu- 
sic from  the  discs  to  their  hard 
drives. 

Smith  detected  that  when  he 
placed  a  compact  disc  into  his  com- 
puter, the  Real  Jukebox  software 
automatically  transmitted  his  ma- 
chine's unique  identifier  and  his 
musical  selections  to  Real  Net- 
works. 

Since  Real  Networks  had  his 
name  and  other  personal  informa- 
tion from  his  registration,  "it  put 
them  in  a  position  of  being  able  to 
build  a  database  of  what  CDs  I  was 
listening  to,"  Smith  said.  He  alerted 
the  media  and  a  controversy  en- 
sued. In  response,  Real  Network 
disabled  the  technology. 

Real  Networks  didn't  challenge 
Smith's  facts,  just  his  conclusions. 
"He  seemed  to  assume  that  .  .  . 
Real  Networks  was  monitoring,  and 
that  was  not  the  case,"  said  Allen 
Mayer,  a  company  spokesman. 
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Privacy  champion  defeating  Net  threats  one  by  one 


By  Frank  James 

KN1CIIT  RIDPER  NEWSSERVICE 

Richard  M.  Smith  is  a  software 
expert  who  doesn't  fully  trust 
his  own  kind. 

So  he  has  launched  a  personal 
crusade  to  expose  technology  prac- 
tices that  threaten  the  privacy  of 
millions  of  Internet  users. 

The  retired  co-founder  of  a  maker 
of  specialized  software  for  industry, 
he  has  a  growing  reputation  as  one 
of  the  Internet's  premier  privacy  de- 
fenders. 

He  has  essentially  become  the 
Techie  Avenger  for  millions  of  less 
savvy  Internet  users  who  surf  un- 
aware of  how  much  of  their  personal 
information  is  silently  being  gath- 
ered. 

Smith  has  unmasked  techniques 
employed  by  some  of  the  Internet's 
best  known  companies  —  including 
Microsoft  Corp.  and  Real  Networks 
—  to  invisibly  retrieve  information 
from  Internet  users'  computers  in 
ways  those  firms  didn't  fully  dis- 
close until  Smith  raised  questions. 

He  discovered  thai  software 
made  by  a  subsidiary  of  Ama- 
zon.com, Alexa  Internet,  ostensibly 
designed  to  help  Internet  shoppers 
find  the  best  deals  and  product  infor- 
mation, also  secretly  gathered  per- 
sonal information  on  the  user. 

Smith,  46.  filed  a  complaint  with 
the  Federal  Trade  Commission  after 
discovering  thatAlexa'szBubbles 
software  harvested  information 
about  his  activities  online  and  trans- 
mitted it  back  to  Alexa. 

Besides  his  e-mail  and  physical 
address,  Alcxa's  software  surrepti- 
tiously recorded  his  sister's  phone 
number  when  he  used  his  computer 
to  call  her. 

It  noted  his  purchase  of  a  Boston- 
to- Las  Vegas  airline  ticket,  die 
DVDs  he  considered  buying  from 
an  online  retailer  and  the  informa- 
tion he  typed  in  to  confirm  his  teen- 
age daughter's  flight  home  from 
Philadelphia. 

All  this  was  done  without  notice 
to  him  from  Alexa  that  his  personal 
data  was  being  retrieved,  he  said. 

"It  was  one  of  the  more  intrusive 
pieces  of  software  I've  ever  seen," 
said  Smith. 

Said  Brewster  Kahle,  Alexa's 
chief  executive:  "Our  users'  privacy 
is  of  the  utmost  importance  to  us," 
hut  declined  further  comment,  cit- 
ing the  complaint  before  the  FTC. 

Asking  all  the  questions 

Interviewed  in  the  rambling 
frame  house  in  a  Boston  suburb  that 
he  shares  with  his  Russian-bom 
wife,  teen-age  daughter  and  stand- 
ard poodle,  Smith  said  his  mission  is 
a  simple  one. 

"I  want  to  show  how  much  moni- 
toring is  being  done  so  we  can  make 
good  decisions  about  whether  we 
want  this  or  not,"  Smith  said  in  the 
attic  room  where  he  does  most  of 
his  detective  work. 

"If  we  talk  to  marketing  folks  who 
are  involved,  they  say:  'Oh,  there's 
no  problem  here.  It's  all  for  your 
own  good.  And  don't  ask  too  many 
questions.' What  I  like  to  do  is  nsk,  .  • 
,al]  the  questions,"*  he said.  .-_.•  i—- 


The  Web  privacy  problem.  Smith 
said,  has  two  fathers.  Internet  com- 
panies often  are  given  high  stock 
values  in  part  because  of  the  person- 
al infomiation  they  have  on  current 
and  prospective  customers.  So  there 
is  great  incentive  for  them  to  collect 
such  data,  he  said. 

The  other  is  that  software  engi- 
neers by  nature  like  to  do  their  own 
thing.  Software  writers  "sort  of  cre- 
ate their  own  little  world  with  soft- 
ware. They  write  the  rules.  'Ihe  last 
thing  in  the  world  diey  want  to  be 
told  is  what  to  do,"  SmiUi  said. 

He  foresees  legislators  eventually 
passing  laws  that  tell  software  com- 
panies what  kind  of  information  they 
can  and  can't  "transmit  up  and  down 
the  wire,"  without  the  users'  in- 
formed consent,  as  well  as  ethical 
training  for  software  developers,  he 
said. 

A  bug  specialist 

Smith,  who  sits  on  the  Federal 
Trade  Commission's  Advisory  Com- 
mittee on  Online  Access  and  Securi- 


Alexa's  software 
surreptitiously 
recorded  his  sister's 
phone  number  when 
he  used  his 
computer  to  call  her. 


ty,  started  thinking  about  Internet 
security  years  ago  when  he  ran  Phar 
Lap  Software  Inc.,  a  Cambridge, 
Mass.,  Dm)  named  for  a  famous 
Australian  racehorse. 

He  focused  mainly  on  software 
bugs  thai  left  computers  vulnerable 
to  hackers  and  viruses.  It  was  Smith 
who  last  year  uncovered  Ihe  name 
of  the  Melissa  e-mail  virus'  creator, 
David  L  Smith,  and  passed  it  along 
to  authorities. 

A  year  ago,  he  turned  his  atten- 
tion to  Internet  privacy.  'Ihe  contro- 
versy over  Intel  Corp.'s  plan  for  a  se- 
rial number  in  its  Pentium  111 
microchip  processors  that,  theoreti- 
cally, would  make  possible  tracing 
millions  of  computers  over  the  Inter- 
net, made  him  wonder  whal  other 
tracking  might  already  be  occur- 
ring. 

He  found  that  Microsoft  Word, 
the  nation's  most  popular  word  pro- 
cessor program,  embedded  a  hid- 
den electronic  identifier,  unique  to 
each  computer,  on  Word  docu- 
ments. 

Thai  globally  unique  identifier,  as 
it  is  called,  was  sent  back  to  Micro- 
soft when  consumers  registered 
their  Microsoft  software,  Smith 
learned. 

Thus,  the  personal  information 
people  provided  upon  registration 
could  theoretically  be  linked  to  a 
particular  document  written  in 
Word. 

"I  said  'Holy  cow,  this  is  bad,' " 
Smith  recalled.  "Not  that  anybody 

•  was  using  all  Uiis  stuff,  but  this  inter-  j 

•  esling  little  surveillance  system  was  J 


all  in  place"  if  ever  someone  wanted 
to  use  iL 

Snuth  contacted  Microsoft,  which 
"right  off  die  bat  realized  this  was 
not  a  good  situation,"  Smith  said. 

The  company  slopped  new  ver- 
sions of  its  software  from  stamping 
documents  with  the  unique  num- 
bers. 

Carol  Sacks,  a  Microsoft  spokes- 
woman, said,  "Ihe  fact  is,  Richard  is 
a  technical  expert,  and  we  respect 
what  he  does.  We  believe  (his  ef- 
forts) are  inlended  to  help  strength- 
en consumers'  privacy  protection, 
and  this  is  an  important  issue  to  all 
of  us." 

Listening  in 

Last  October,  Smith  found  soft- 
ware by  Real  Networks,  the  Seattle- 
based  company,  doing  something 
similar.  Real  Networks'  software 
compresses  and  decompresses 
large  sound  and  video  files  for  trans- 
mission over  Hie  Internet 

Another  feature  of  the  company's 
Real  Jukebox  software  allows  people 
who  listen  to  compact  discs  on  dieir 
computers  to  transfer  music  from 
the  discs  to  their  hard  drives. 

Snuth  detected  that  when  he 
placed  a  compact  disc  into  his  com- 
puter, the  Real  Jukebox  software  au- 
lomabc^ly  transmitted  his  ma- 

mtiKical-Hrlerriops |r>Keal Net'V:V  ' 


works. 

Since  Real  Networks  had  his 
name  and  other  personal  informa- 
tion from  his  registration,  "it  put 
them  in  a  position  of  being  able  to 
build  a  database  of  what  CDs  I  was 
listening  to,"  Snuth  said. 

He  alerted  Ihe  media  and  a  con- 
troversy ensued.  In  response,  Real 

"I  want  to  show  how 
much  monitoring  is 
being  done  so  we  can 
make  good  decisions 
about  whether  we 
want  this  or  not." 

Richard  M.  Smith, 
security  specialist 

Network  disabled  Hie  technology. 

Real  Networks  didn't  challenge 
Smith's  facts,  jusl  his  conclusions. 

"He  seemed  to  assume  that . . . 
Real  Networks  was  monitoring,  and 
that  was  not  die  case,"  said  Allen 
Mayer,  a  Real  Networks  spokes- 

When  Snuth  went  public,  Real_ 
•l^etwrirk^  had  ajreadj; planned  "a  ;,;;-• 
:Woliwv:fix  to  stopthe  transmitting 


Successful  sleutli: 

Richard M.  Smith, 
who  uncovered  the 
name  of  the  Melissa 
e-mail  virus' creator, 
is  developing  a 
reputation  as  one  of 
the  Net's  leading 
privacy  defenders, 
making  sure  that  the 
public  is  aware  of 
privacy  issues. 


of  the  personal  infomiation  and  up- 
date its  privacy  policy.  Mayer  said. 

Sinidi  had  criticized  die  privacy 
policy  posted  on  Hie  company's 
Web  site  for  not  mentioning  the 
practice. 

"There's  no  question  that  Smith's 
work  sped  up  the  timetable,"  Mayer 
said. 

Smith  commented,  "What's  inter- 
esting to  me  is  when  a  lot  of  Uiesc 
monitoring  systems  are  exposed  to 
the  sunshine,  companies  seem  to 
immediately  stop  doing  it." 

Getting  a  lot  of  calls 

SmiUi  also  triggered  a  number  of 
class-action  lawsuits  against  Real 
Networks. 

"I'm  getting  a  lot  of  calls  from  law- 
yers these  days,"  said  Smith,  who 
refuses  to  be  an  expert  witness  for 
plaintiffs;  it  would  taint  his  efforts, 
he  said. 

State  attorneys  general  and  law- 
yers for  companies  diat  hope  to 
avoid  running  afoul  of  him  have  also 
calle/l  seeking  advice. 

However,  he  has  signed  on  as  a 
paid  consultant  on  Internet  privacy 
issues  to  a  company  he  declined  to 
name.  While  he  made  enough  mon- 
ey to  be  comfortable,  he  does  not 
have  the  megawealdi  of  some  Inter- 
net entrepreneurs. 

"I'm  kind  of  jealous.  1  can  only  re- 
tire for  a  year,"  he  said  with  a  laugh-.   , 
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%    Michigan  gets  wired 

-•  Gov.  Engler  established  ah  e- 
Michigan  office  at  the  start  of  April 
to  develop  electronic  government 
services,  reengineer  current  prac- 
tices and  design  progressive  solu- 
tions to  conduct  government  busi- 
ness. 

;  Stephanie  Comai,  director  of  the 
governor's  division  of  State  Govern- 
ment Affairs,  will  direct  the  new 
office.  (She  will  be  replaced  by  Brian 
DeBano  in  her  former  post). 

A  six-member  e-Michigan  Advi- 
sory Council  will  be  chaired  by 
Engler  or  an  appointee  to  assure  the 
best  practices  for  e-commerce,  edu- 
cation, etc.  For  more  information,  go 
online   -  to  http://info. 

migov. state. mo. us/gov/ 


Top  Black 
cypberspots 

Blackplanet.com  and  Cush- 
city.com  are  in  the  click  for  African 
American  superhighway  travelers. 
The  first  gives  the  most  information 
and  the  second  is  thick  with  e-cus- 
tomers,  according  to  monitoring 
firm  Alcxa.  The  two  topped  the  list  of 
African  American  sites  on  the  web, 
found  at  www.topblacksites.com, 
that  draw  28  percent  of  African 
Americans  that  are  online.     ; 

In  the  upper  portals  of  success 
for  the  largest  minority  group  estab- 
lished on  the  Internet  are  (3)  Peeps, 
com  (4)  Bet.com  and  (5) 
Netrioir.cbrn.  the  money  makers 
include  allblackbooks.com,  lit- 
tleafrica.com,  AASM.com  and  artof- 
color.com. 
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"Not  that  anybody  was  using  all 
this  stuff,  but  this  interesting  little 
surveillance  system  was  all  in 
place"  if  ever  someone  wanted  to 
use  it. 

Smith  contacted  Microsoft.  The 
Redmond,  Wash. -based  software 
giant  "right  off  the  bat  realized  this 
was  riot  a  good  situation,"  he  said. 
The  company  stopped  new  versions 
of  its  software  from  stamping  docu- 
ments with  the  unique  numbers. 

Carol  Sacks,  a  Microsoft  spokes- 
woman, said,  'The  fact  is,  Richard 
is  a  technical  expert,  and  we  re- 
spect what  he  does.  We  believe  (his 
efforts)  are  intended  to  help 
strengthen  -consumers'  privacy  pro- 
tection, and  this  is  an  important 
issue  to  all  of  us." 

Striking  a  sour  note 

Last  October,  Smith  found'  soft- 
ware by  Real  Networks,  the  Seattle- 
based  company,  doing  something 
similar.  Real  Networks'  software 
compresses  and  decompresses 
large  sound  and  video  files  for 
transmission  over  the  Internet. 

Another  feature  of  the  company's 
Real  Jukebox  software  allows  peo- 
ple who  listen  to  compact  discs  on 
their  computers  to  transfer  music 
from '1  he  discs  to  their  hard  drives. 

Smith  detected  that  when  he 
placed  a  compact  disc  into  his 
computer,  the  Real  Jukebox  soft- 
ware automatically  transmitted  his 
machine's  unique  identifier  and  his 
musical  selections  to  Real  Net- 
works. 

Since  Real  Networks  had  his 


name  and  other  personal  informa- 
tion from  his  registration,  "it  put 
them  in  a  position  of  being  able  to 
build  a  database  of  what  CDs  1  was 
listening  to,"  Smith  said.  He  alerted 
the  media,  and  a  controversy  en- 
sued. In  response,  Real  Networks  . 
disabled  the  technology. ' 

Real  Networks  didn't  challenge 
Smith's  facts,  just  his  conclusions. 
"He  seemed  to  assume  that . . . 
Real  Networks  was  monitoring,  and 
that  was  not  the  case,"  said  Allen 
Mayer,  a  Real  Networks  spokes- 
man. 

When  Smith  went  public.  Real 
Networks  had  already  planned  a 
software  fix  to  stop  the  transmit- 
ting of  the  personal  information 
and  update  its  privacy  policy,  May- 
er said.  Smith  had  criticized  the 
privacy  policy  posted  on  the  com- 
pany's Web  site  for  not  mentioning 
the  practice.  "There's  no  question     - 
that  Smith's  work  sped  up  the 
timetable,"  Mayer  said.  ' , 

Smith  also  triggered  a  number  of 
class-action  lawsuits  against  Real 
Networks.  "I'm  getting  a  lot  of  calls 
from  lawyers  these  days, ".said 
Smith,  who  refuses  to  be  an  expert 
witness  for  plaintiffs;  it  would  taint 
his  efforts,  he  said.  State  attorneys 
general  and  lawyers  for  companies 
that  hope  to  avoid  running  afoul  of 
him  have  also  called  to  seek  ad- 
vice. 

However,  he  has  signed  on  as  a 
paid  consultant  on  Internet  privacy 
issues  to  a  company  he  declined  to 
name.  Whilehe's  made  enough 
money  to  be  comfortable,  he  does 
not  have  the  megawealth  of  some 
Internet  entrepreneurs.  "I'm  kind  of 
jealous.  I  can  only  retire  for  a 
year,"  he  said  with  a  laugh. 
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Net  privacy  protector 


H  Renowned  cyber-  sleuth's  specialty  is  uncovering 
embedded  software  applications  that  could  extract 
personal  info  from  unsuspecting  Web  users. 


Richard  M.  Smith  is  a  software  ex- 
pert who  doesn't  fully  trust  his 
own  kind.  So  he  has  launched  a 
personal  crusade  to  expose  tech- 
nology practices  that  threaten  (he 
privacy  of  millions  of  Internet 
users. 
The  retired  co-founder  of  a 
maker  of  specialized  software  for 
'  Industry,  he  has  a  growing  reputation  as  one  of 
!  the  Internet's  premier  privacy  defenders.  He  has 
'  essentially  become  the  Techle  Avenger  for  mll- 
',  lions  of  less-sawy  Internet  users  who  surf  un- 
'  aware  of  how  much  of  their  personal  Informadon 
!  Is  silently  being  gathered. 
;      Smith  has  unmasked  techniques  employed  by 
.  some  of  the  Internet's  best-known  companies  — 
Including  Microsoft  Corp.  and  Real  Networks  — 
to  Invisibly  retrieve  Information  from  Internet 
users'  computers  In  ways  those  firms  didn't  fully 
disclose  until  Smith  raised  questions. 

He  discovered  that  software  made  by  a  sub- 
sidiary of  Amazon.com.  Alexa  Internet,  ostensibly 
designed  to  help  InterneTshoppefS  Mid  the  best 
deals  and  product  Information,  also  secretly 
gathered  personal  information  on  the  user. 

Smith,  46,  filed  a  complaint  with  the  Federal 
Trade  Commission  after  discovering  that  Alexa's 
zBubbles  software  harvested  information  about 
his  activities  online  and  transmitted  It  back  to 
Alexa. 

Besides  his  e-mail  and  physical  address,  Alex- 
a's software  surreptitiously  recorded  his  sister's 
phone  number  when  he  used  his  computer  to 
call  her  It  noted  his  purchase  of  a  Boston-lo-Las 
Vegas  airline  ticket,  the  DVDs  he  considered  buy- 
ing from  an  online  retailer  and  the  information 
he  typed  In  to  confirm  his  teen-age  daughter's 
flight  home  from  Philadelphia. 

All  this  was  done  without  notice  to  him  that 
his  personal  data  was  being  retrieved  by  Alexa. 
he  said. 

"It  was  one  of  the  more  intrusive  pieces  of  soft- 


ware I've  ever  seen."  said  Shilth. 

Said  Brewster  Kahle,  Alexa's  chief  executive: 
"Our  users'  privacy  is  of  the  utmost  Importance 
to  us."  He  declined  to  comment  further,  citing  the 
complaint  before  the  FTC. 

Smith  said  his  mission  is  a  simple  one. 

"I  want  to  show  how  much  monitoring  is  being 
done  so  we  can  make  good  decisions  about 
whether  we  want  tills  or  not."  Smith  said. 

He  foresees  legislators  eventually  passing  laws 
that  tell  software  companies  what  kind  of  infor- 
mation they  can  and  can't  "transmit  up  and 
down  the  wire"  without  the  users'  informed  con- 
sent, as  well  as  ethical  training  for  software  de- 
velopers, he  said. 

Smith,  who  sits  on  the  Federal  Trade  Commis- 
sion's Advisory  Committee  on  On-line  Access  and 
Security,  started  thinking  about  Internet  security 
years  ago  when  he  ran  Phar  Lap  Software,  a 
Cambridge,  Mass..  firm  named  for  a  famous  Aus- 
tralian  racehorse. 

He  focused  mainly  on  soflware  bugs  that  left 
computers  vulnerable  to  hackers  and  viruses.  11 
was  Smith  who  last  year  uncovered  the  name  of 
the  Melissa  e-mail  virus's  creator.  David  L. 
Smith,  and  passed  it  along  to  authorities. 

A  year  ago.  he  turned  his  attention  to  Internet 
privacy.  The  controversy  over  Intel  Corp.'s  plan 
for  a  serial  number  In  its  Pentium  III  microchip 
processors  that,  theoretically,  would  make  pos- 
sible the  tracing  of  millions  of  computers  over  the 
Internet,  made  him  wonder  what  other  tracking 
might  already  be  occurring. 

He  found  that  Microsoft  Word,  the  nation's 
most  popular  word  processor  program,  embed- 
ded a  hidden  electronic  identifier,  unique  to  each 
computer,  on  Word  documents. 

That  globally  unique  Identifier,  as  It  Is  called, 
was  sent  back  to  Microsoft  when  consumers  reg- 
istered their  Microsoft  software.  Smith  learned." 

Thus,  tile  personal  Information  people  pro- 
vided upon  legislation  could  theoretically  be 
linked  to  a  particular  document  written  In  Word. 

"I  said  Holy  cow.  this  is  bad.' "  Smith  recalled. 

See  PRIVACY  Page  9 
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Wary:  Richard  M.  Smith  says,  "When  a  lot  of  these  monitoring 
systems  are  exposed  . . .  companies  seem  to  stop  doing  it." 
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Fighting  the  good  fight  for  privacy 


^ 


■  Crusade:  A  Boston- 
area  software  expert 
has  dedicated  himself  to 
uncovering  secret  data- 
gathering  practices. 


By  Frank  James 

CHICAGO  TRIBUNE 


Richard  M.  Smith  is  a  soft- 
ware expert  who  doesn't  fully 
trust  his  own  kind.  So  he  has 
launched  a  personal  crusade 
to  expose  technology  prac- 
tices that  threaten  the  privacy 
of  millions  of  Internet  users. 

The  retired  co-founder  of  a 
maker  of  specialized  software 
for  industry,  he  has  a  growing 
reputation  as  one  of  the  In- 
ternet's premier  privacy  de- 
fenders. He  has  essentially 
become  the  Tecnie  Avenger 
for  millions  of  less  knowledge- 
able Internet  users  who  surf 
unaware  of  how  much  of  their 
personal  information  is 
silently  being  gathered. 

Smith  has  unmasked 
techniques  employed  by 
some  of  the  Internet's  best- 
known  companies  —  includ- 


ing Microsoft  Corp.  and  Real 
Networks  —  to  invisibly  re- 
trieve information  from  In- 
ternet users'  computers  in 
ways  those  firms  didn't  fully 
disclose  until  Smith  raised 
questions. 

He  discovered  that  soft- 
ware made  by  a  subsidiary  of 
Amazon.com,  Alexa  Internet, 
ostensibly  designed  to  help 
Internet  shoppers  find  the 
best  deals  and  product  infor- 
mation, also  secretly  gath- 
ered personal  information 
about  the  user. 

Smith,  46,  filed  a  com- 
plaint with  the  Federal  Trade 
Commission  after  discover- 
ing that  Alexa' s  zBubbles 
software  harvested  informa- 
tion about  his  activities  on- 
line and  transmitted  it  back 
to  Alexa. 

Besides  his  e-mail  and 
physical  address,  Alexa's  soft- 
ware surreptitiously  recorded 
his  sister's  phone  number 
when  he  used  his  computer  to 
call  her.  It  noted  his  purchase 
of  a  Boston-to-Las  Vegas  air- 
line ticket,  the  DVDs  he  con- 
sidered buying  from  an  online 
retailer  and  the  information 
he  typed  in  to  confirm  his 
teen-age    daughter's    flight 


Slipping  'cookies9 into gour  computer 

When  you  connect  to  some  Internet  locations,  your 
computer  sends  out  personal  information  about  you 
without  your  consent  or  knowledge. 

2  When  user 
disconnects, 
the  cookie 
remains  in 
the  computer 

Other  data 
about  user's 
Internet  use 
are  later  stored 
in  the  cookie 

Next  time  user 
connects  to  the 
host,  it  reads 
the  cookie  for 
information 
about  the  user 


|  As  user 
'  and  host 

communicate 

some  data  are  stored 

in  the  cookie 


NOTE:  A  guide  to  disabling  cookies  is  at 
http://www.junkbusters.com 


SOURCE:  News  reports,  Electronic  Privacy 

home  from  Philadelphia. 

All  this  was  done  without 
notice  to  him  from  Alexa  that 
his  personal  data  were  being 
retrieved,  he  said. 

"It  was  one  of  the  more  in- 
trusive pieces  of  software  I've 


Information  Center  (http://epic.org) 
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ever  seen,"  said  Smith. 

Said  Brewster  Kahle, 
Alexa's  chief  executive:  "Our 
users'  privacy  is  of  the  utmost 
importance  to  us,"  but  de- 
clined further  comment,  cit- 
ing tfee         [See  Privacy,  4c] 


Software  expert  fighting 
the  good  fight  for  privacy 
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what  other  tracking  mlphl  already 
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ThnL  globally  unique  identifier. 

as  It  is  called,  was  sent  back  to  Ml 

crosoa  when  consumers  registered 

:he!r    Microsoft    software,    Smith 

Redmond,  Wash  based  software 
giant  'right  ofTUie  bat  rca!i2cd  this 
was  not  a  good  situation."  Smith 
said    The  company  stopped  new 

stumping    documents     with     the 

In  October.  Smith  found  soft- 


sir  from  the  discs  to  their  hard  dri- 
Smith  detected  that  when  he 

computer,  the  Real  Jukebux  soft- 
ware automatically  transmitted 
his  machine  s  unique  Identifier  and 
his  musical  selections  to  Real  Net- 
Since  Real  Networks  had  Ills 
name  and  other  personal  Informa- 
tion from  his  registration,  "it  put 
them  In  a  position  of  b^ing  able  to 
build  a  dfitaba.se  of  what  CDs  I  was 
listening  to,"  Smith  said.  He  alert- 
ed the  media  and  a  controversy  en- 

r|i:,uNeri  i he  technology 

Real  Networks  didn't  chnJIenge 
Smith's  facts,  Just  his  conclusions. 
"He  seemed  to  assume  that ...  Real 
Networks    was    monitoring,    and 

Mayer.        a        Real        Networks 
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Software  expert's  a  privacy  crusader 


Smith  battles 
efforts  to  get 
data  secretly 


Richard  M.  Smith  is  a  software 
expert  who  doesn't  fully  trust  his 
own  kind.  So  he  has  launched  a  per- 
sonal crusade  to  expose  technology 
practices  that  threaten  the  privacy 
of  millions  of  Internet  users. 

The  retired  co-founder  of  a 
maker  of  specialized  software  for  in- 
dustry, he  has  a  growing  reputation 
as  one  of  the  Internet's  premier  pri- 
vacy defenders.  He  has  essentially 
become  the  Techie  Avenger  for  mil- 
lions of  less  savvy  Internet  users 
who  surf  unaware  of  how  much  of 
their  personal  information  is  silently 
being  gathered. 

Smith  has  unmasked  techniques 
employed  by  some  of  the  Internet's 
kbest  known  companies  —  including 
"Microsoft  Corp.  and  Real  Networks 
—  to  invisibly  retrieve  information 
from  Internet  users'  computers  in 
ways  those  firms  didn't  fully  dis- 
close until  Smith  raised  questions. 

He  discovered  that  software 
made  by  a  subsidiary  of 
Amazon.com,  Alexa  Internet,  osten- 
sibly designed  to  TielpTnternel  shop- 
pers find  the  best  deals  and  product 
information,  also  secretly  gathered 
personal  information  on  the  user. 

Smith,  46,  filed  a  complaint  with 
the  Federal  Trade  Commission  after 
discovering  that  Alexa's  zBubbles 
software  harvested  information 
about  his  activities  online  and  trans- 
mitted it  back  to  Alexa. 

Besides  his  e-mail  and  physical 
address,  Alexa's  software  surrepti- 
tiously recorded  his  sister's  phone 
number  when  he  used  his  computer 
to  call  her.  It  noted  his  purchase  of  a 
Boston-lo-Las  Vegas  airline  ticket, 
the  DVDs  he  considered  buying 
from  an  on-line  retailer  and  the  in- 
formation he  typed  in  to  confirm  his 


teen-age  daughter's  flight  home 
from  Philadelphia. 

All  this  was  done  without  notice 
to  him  from  Alexa  that  his  persona) 
data  was  being  retrieved,  he  said. 

"It  was  one  of  the  more  intrusive 
pieces  of  software  I've  ever  seen," 
said  Smith. 

Said  Brewster  Kahle,  Alexa's 
chief  executive:  "Our  users'  privacy 
is  of  the  utmost  importance  to  us," 
but  declined  further  comment,  cit- 
ing the  complaint  before  the  FTC. 

Smith  said  his  mission  is  a  sim- 
ple one. 

"I  want  to  show  how  much  moni- 
toring is  being  done  so  we  can  make 
good  decisions  about  whether  we 
want  this  or  not,"  Smith  said  in  the 
attic  room  where  he  does  most  of  his 
detective  work.  "If  we  talk  to  market- 
ing folks  who  are  involved,  they  say: 
'Oh,  there's  no  problem  here.  It's  all 
for  your  own  good.  And  don't  ask  too 
many  questions.'  What  I  like  to  do  is 
ask  all  the  questions,"  he  said. 

The  Web  privacy  problem,  Smith 
said,  has  two  fathers.  Internet  com- 
panies often  are  given  high  stock 
values  in  part  because  of  the  per- 
sonal information  they  have  on  cur- 
rent and  prospective  customers.  So 
there  is  great  incentive  for  them  to 
collect  such  data,  he  said. 

The  other  is  that  software  engi- 
neers by  nature  like  to  do  their  own 
thing.  Software  writers  "sort  of  cre- 
ate their  own  little  world  with  soft- 
ware. They  write  the  rules.  The  last 
thing  in  the  world  they  want  to  be 
told  is  what  to  do,"  Smith  said. 

He  foresees  legislators  eventual- 
ly passing  laws  that  tell  software 
companies  what  kind  of  information 
they  can  and  can't  "transmit  up  and 
down  the  wire,"  without  the  users' 
informed  consent,  as  well  as  ethical 
training  for  software  developers,  he 
said. 

Smith,  who  sits  on  the  Federal 
Trade  Commission's  Advisory  Com- 
mittee on  On-line  Access  and  Secu- 
rity, started  thinking  about  Internet 
security  years  ago  when  he  ran 
Phar  Lap  Software  Inc.,  a  Cam- 
bridge, Mass.,  Brni  named  for  a  fa- 
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Internet  security  specialist  Richard  M.  Smith  is  shown  at  his  home  of- 
fice In  Brookline,  Mass.  Smith  is  a  software  expert  who  has  a  growing  repu- 
tation as  one  ot  the  Internet's  premier  privacy  defenders, 
mous  Australian  racehorse.  lie  found  that  Microsoft  Word, 

He  focused  mainly  on  software  the  nation's  most  popular  word 
bugs  that  left  computers  vulnerable  processor  program,  embedded  a  hid- 
to  hackers  and  viruses.  It  was  Smith  den  electronic  identifier,  unique  to 
who  last  year  uncovered  the  name  each  computer,  on  Word  documents, 
of  the  Melissa  e-mail  virus'  creator,  That  globally  unique  identifier,  as 
David  L.  Smith,  and  passed  it  along  it  is  called,  was  sent  back  to  Mi- 
to  authorities.  crosoft  when  consumers  registered 

A  year  ago,  he  turned  his  atten-  their  Microsoft  software,  Smith 
tion  to  Internet  privacy.  The  conlro-    learned. 

versy  over  Intel  Corp.'s  plan  for  a  se-  Thus,  the  personal  information 
rial  number  in  its  Pentium  III  mi-  people  provided  upon  registration 
crochip  processors  that,  theoretical-  could  theoretically  be  linked  to  a  par- 
ly, would  make  possible  tracing  ticular  document  written  in  Word, 
millions  of  computers  over  the  Inter-  "I  said  'Holy  cow,  this  is  bad,'  " 
net,  made  him  wonder  what  other  Smith  recalled.  "Not  that  anybody 
tracking  might  already  be  occurring.      was  using  all  this  stuff,  but  this  in- 


teresting little  surveillance  system 
was  all  in  place"  if  ever  someone 
wanted  to  use  it. 

Smith  contacted  Microsoft.  The 
Redmond.  Wash. -based  software 
giant  "right  off  the  bat  realized  this 
was  not  a  good  situation,"  Smith  said. 
The  company  stopped  new  versions 
of  its  software  from  stamping  docu- 
ments wiUi  the  unique  numbers. 

Last  October,  Smith  found  soft- 
ware by  Real  Networks,  the  Seattle- 
based  company,  doing  something 
similar.  Real  Networks'  software 
compresses  and  decompresses 
large  sound  and  video  Tiles  for  trans- 
mission over  the  Internet. 

Another  feature  ot  the  company's 
Real  Jukebox  software  allows  peo- 
ple who  listen  to  compact  discs  on 
their  computers  to  transfer  music 
from  the  discs  to  their  hard  drives. 

Smith  detected  that  when  he 
placed  a  compact  disc  into  his  com- 
puter, the  Real  Jukebox  software  au- 
tomatically transmitted  his  ma- 
chine's unique  identifier  and  his  mu- 
sical selections  to  Real  Networks. 

Since  Real  Networks  had  his 
name  and  other  personal  informa- 
tion from  his  registration,  "it  put 
them  in  a  position  of  being  able  to 

Id  a  database  of  what  CDs  I  was 
listening  to."  Smith  said.  He  alerted 
the  media  and  a  controversy  en- 
sued. In  response,  Real  Network 
disabled  the  technology. 

Real  Networks  didn't  challenge 
Smith's  facts,  just  his  conclusions. 
"He  seemed  to  assume  thai  ...  Real 
Networks  was  monitoring,  and  thai 
was  not  the  case."  said  Alien  Mayer. 
a  Real  Networks  spokesman. 

When  Smith  went  public.  Real 
Networks  had  already  planned  a 
software  fix  to  stop  the  transmitting 
of  the  personal  information  and  u|> 
date  its  privacy  policy,  Mayer  said. 

Smith  commented,  "What's  inter- 
esting to  me  is  when  a  lot  of  these 
moniioring  systems  are  exposed  to 
the  sunshine,  companies  seem  to 
immediately  stop  doing  it." 

Smith  also  triggered  a  number  of 
class  action  lawsuits  against  Real 
Networks.  /i 
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Cybersleuth  aims  to  protect  consumers 


By  FRANK  JAMES 

Knight  Ricldci  Newspapers 

Richard  M.  Smith  is  a  software 
expert  who  doesn't  fully  trust 
his  own  kind,  So  he  has 
launched  a  personal  crusade  to 
expose  technology  practices  that 
threaten  the  privacy  of  millions  of 
Internet  users. 

The  retired  co-founder  of  a  maker 
of  specialized  software  for  industry, 
he  has  a  growing  reputation  as  one 
of  the  Internet's  premier  privacy 
defenders.  He  has  essentially  be- 
come the  Techie  Avenger  for  mil- 
lions of  less  savvy  Internet  users 
who  surf  unaware  of  how  much  of 
their  personal  information  is  silently 
being  gathered. 

Smith  has  unmasked  techniques 
employed  by  some  of  the  Internet's 
best  known  companies  —  including 
Microsoft  Coip.  and  Real  Networks 
—  to  invisibly  retrieve  information 
from  Internet  users'  computers  in 
ways  those  firms  didn't  fully  disclose 
until  Smith  raised  questions. 

He  discovered  that  software  made 
by  a  subsidiary  of  Amazon.com, 
Alexa  Internet,  ostensibly  designed 
to  help  Internet  shoppers  find  the 
best  deals  and  product  information, 
also  secretly  gathered  personal 
information  on  the  user. 

Smith,  46,  filed  a  complaint  with 
the  Federal  Trade  Commission  after 
discovering  that  Alexa's  zBubbles 
software  harvested  information 
about  his  activities  on-line  and  trans- 
mitted it  back  to  Alexa. 

Besides  his  e-mail  and  physical 
address,  Alexa's  software  surrepti- 
tiously recorded  his  sister's  phone 
number  when  he  used  his  computer 
to  call  her.  It  noted  his  purchase  of  a 
Boston-to-Las  Vegas  airline  ticket, 
the  DVDs  he  considered  buying 
from  an  on-line  retailer  and  the  infor- 
mation he  typed  in  to  confirm  his 
teenage  daughter's  flight  home  from 
Philadelphia. 

All  this  was  done  without  notice  to 
him  from  Alexa  that  his  personal 
data  was  being  retrieved,  he  said. 

"It  was  one  of  the  more  intrusive 
pieces  of  software  I've  ever  seen," 
said  Smith. 

Said  Brewster  Kahle,  Alexa's 
chief  executive:  "Our  users'  privacy 
is  of  the  utmost  importance  to  us," 
but  declined  further  comment,  cit- 
ing the  complaint  before  the  FTC. 

Interviewed  in  the  rambling 
frame  house  in  this  Boston  suburb 
that  he  shares  with  his  Russian-born 
wife,  teenage  daughter  and  standard 


Internet  security  specialist  Richard  M.  Smith  at  his  home  office  in  Brooklinc, 
Mass.  Smith  is  a  software  expert  who  has  a  growing  reputation  as  one 
of  the  Internet's  premier  privacy  defenders. 


poodle,  Smith  said  his  mission  is  a 
simple  one. 

"I  want  to  show  how  much  moni- 
toring is  being  done  so  we  can  make 
good  decisions  about  whether  we 
want  this  or  not,"  Smith  said  in  the 
attic  room  where  he  does  most  of  his 
detective  work.  "If  we  talk  to  mar- 
keting folks  who  are  involved,  they 
say,  'Oh,  there's  no  problem  here. 
It's  all  for  your  own  good.  And  don't 
ask  too  many  questions.'  What  I  like 
to  do  is  ask  all  the  questions,"  he 
said. 

The  Web  privacy  problem.  Smith 
said,  has  two  fathers.  Internet  com- 
panies often  are  given  high  stock  val- 


ues in  part  because  of  the  personal 
information  they  have  on  current 
and  prospective  customers.  So  there 
is  great  incentive  for  them  to  collect 
such  data,  he  said. 

'Hie  other  is  that  software  engi- 
neers by  nature  like  to  do  their  own 
thing.  Software  writers  "sort  of  cre- 
ate their  own  little  world  with  soft- 
ware. They  write  the  rules.  The  last 
thing  in  the  world  they  want  to  be 
told  is  what  to  do,"  Smith  said. 

He  foresees  legislators  eventually 
passing  laws  that  tell  software  com- 
panies what  kind  of  information  they 
can  and  can't  "transmit  up  and  down 
the  wire"   without   the   users'   in- 


formed consent,  as  well  as  ethical 
training  for  software  developers,  he 
said. 

Smith,  who  sits  on  the  Federal 
Trade  Commission's  Advisory  Com- 
mittee on  On-line  Access  and  Secu- 
rity, started  thinking  about  Internet 
security  years  ago  when  he  ran  Phar 
I.ap  Software  Inc.,  a  Cambridge, 
Mass.,  firm  named  for  a  famous 
Australian  racehorse. 

He  focused  mainly  on  software 
bugs  that  left  computers  vulnerable 
to  hackers  and  viruses.  It  was  Smith 
who  last  year  uncovered  the  name  of 
the  Melissa  e-mail  virus'  creator, 
David  L.  Smith,  and  passed  it  along 
to  authorities. 

A  year  ago,  he  turned  his  atten- 
tion to  Internet  privacy.  Hie  contro- 
versy over  Intel  Corp.'s  plan  for  a 
serial  number  in  its  Pentium  111 
microchip  processors  that,  theoreti- 
cally, would  make  possible  tracing 
millions  of  computers  over  the 
Internet,  made  him  wonder  what 
other  tracking  might  already  be 
occurring. 

He  found  that  Microsoft  Word, 
the  nation's  most  popular  word 
processor  program,  embedded  a 
hidden  electronic  identifier,  unique 
to  each  computer,  on  Word  docu- 
ments. 

'ITiat  globally  unique  identifier,  as 
it  is  called,  was  sent  back  to 
Microsoft  when  consumers  regis- 
tered their  Microsoft  software, 
Smith  learned. 

Thus,  the  personal  information 
people  provided  upon  registration 
could  theoretically  be  linked  to  a  par- 
ticular document  written  in  Word. 

"I  said,  'Holy  cow,  this  is  bad,"' 
Smith  recalled.  "Not  that  anybody 
was  using  all  this  stuff,  but  this  inter- 
esting little  surveillance  system  was 
all  in  place"  if  ever  someone  wanted 
to  use  it. 

Smith  contacted  Microsoft.  The 
Redmond,  Wash. -based  software 
giant  "right  off  the  bat  realized  this 
was  not  a  good  situation."  Smith 
said.  'Hie  company  stopped  new  ver- 
sions of  its  software  from  stamping 
documents  with  the  unique  num- 
bers. 

Carol  Sacks,  a  Microsoft  spokes- 
woman, said,  "The  fact  is,  Richard  is 
a  technical  expert,  and  we  respect 
what  he  does.  We  believe  (his  ef 
forts)  are  intended  to  help  strength- 
en consumers'  privacy  protection, 
and  this  is  an  important  issue  to  all 
of  us." 
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Cybersleuth 
top  defender 
of  privacy 


13y  Frank  James 

CHICAGO  TRIBUNE 

Richard  Smith  is  a  software  ex- 
perl  who  doesn't  fully  trust  his  own 
kind.  So  he  has  launched  a  personal 
crusade  to  expose  technology  prac- 
tices that  threaten  the  privacy  of 
millions  of  Internet  users. 

The  retired  co-founder  of  a 
maker  of  specialized  software  for 
industry,  he  has  a  growing  reputa- 
tion as  one  of  the  Internet's  pre- 
mier privacy  defenders.  He  has  es- 
sentially become  the  Techie  Aven- 
ger for  millions  of  less  savvy 
Internet  users  who  surf  unaware  of 
how  much  of  their  personal  in- 
formation is  silently  being  gath- 
ered. 

Smith  has  unmasked  techniques 
employed  by  some  of  the  Internet's 
best  known  companies  —  including 
Microsoft  Corp.  and  Real  Net- 
works —  to  invisibly  retrieve  in- 
formation from  Internet  users' 
computers  in  ways  those  firms 
didn't  fully  disclose  until  Smith 
raised  questions. 

He  discovered  that  software 
made  by  a  subsidiary  of  Ama- 
zon.com  JUe^aJnternel,  ostensibly 
designed  to  help  Internet  shoppers 
find  the  best  deals  and  product  in- 
formation, also  secretly  gathered 
personal  information  on  the  user. 

Smith,  4(i,  filed  a  complaint  with 
the  Federal  Trade  Commission  af- 
ter discovering  that  Alexa's  zBub- 
bles  software  harvested  informa- 
tion about  his  activities  online  and 
transmitted  it  back  to  Alexa. 

Besides  his  e-mail  and  physical 
address,  Alexa's  software  surrepti- 
tiously recorded  his  sister's  phone 
number  when  he  used  his  computer 
to  call  her.  It  noted  his  purchase  of 
a  Boslon-to-Las  Vegas  airline 
ticket,  the  DVDs  he  considered 
buying  from  an  online  retailer  and 
the  information  he  typed  in  to  con- 
firm his  teen-age  daughter's  flight 
home  from  Philadelphia 

All  this  was  done  without  notice 
to  him  from  Alexa  that  his  personal 
data  was  being  retrieved,  he  said. 

"It  was  one  of  the  more  intrusive 
pieces  of  software  I've  ever  seen," 
Smith  said. 

Said  Alexa  Chief  Executive 
Brewster  Kahle:  "Our  users'  pri- 
\  aey  is  of  Hie  utmost  importance  to 
us,"  bill  he  declined  further  com- 
ment,-citing  the  complaint  before 


CHRIS  F 

Richard  Smith  works  at  his  office  in  Brookline,  Mass.  Smith  has  a 
reputation  as  one  of  the  Internet's  premier  privacy  defenders. 


the  FTC. 

Smith  said  his  mission  is  a  sim- 
ple one. 

"I  want  to, show  how  much  mon- 
itoring is  being  done  so  we  can 
make  good  decisions  about 
whether  we  want  this  or  not," 
Smith  said  in  the  attic  room  where 
he  docs  most  of  his  detective  work. 
"If  we  talk  to  marketing  folks  who 
are  involved,  they  say:  'Oh,  there's 
no  problem  here.  It's  all  for  your 
own  good,  and  don't  ask  too  many 
questions '  What  1  like  to  do  is  ask 
all  the  questions." 

The  Web  privacy  problem,  Smith 
said,  has  two  fathers.  Internet  com- 
panies often  are  given  high  slock 
values  in  part  because  of  the  per- 
sonal information  they  have  on  cur- 
rent and  prospective  customers.  So 
(here  isgn-al  incentive  for  them  to 
collect  such  data,  he  said. 


The  other  is  that  software  engi- 
neers by  nature  like  to  do  their  own 
thing.  Software  writers  "sort  of 
create  their  own  little  world  with 
software.  They  write  the  rules.  The 
last  thing  in  the  world  they  want  to 
be  told  is  what  to  do,"  Smith  said. 

Be  foresees  legislators  eventu- 
ally passing  laws  that  tell  software 
companies  what  kind  of  informa- 
tion they  can  and  can't  "transmit 
up  and  down  the  wire,"  without  the 
users'  informed  consent,  as  well  as 
ethical  training  for  software  devel- 
opers. 

Smith,  who  sits  on  the  Federal 
Trade  Commission's  Advisory 
Committee  on  Online  Access  and 
Security, stalled  thinking  about  In- 
ternet security  years  ago  when  he 
ran  Phar  I.npSoflwnro  Inc. 

lie  focused  mainly  on  software 
bugs  that  left  computers  vulner- 


able to  hackers  and  viruses.  It  was 
Smith  who  last  year  uncovered  the 
name  of  the  Melissa  e-mail  virus' 
creator,  David  L.  Smith,  and 
passed  it  along  to  authorities. 

A  year  ago,  he  turned  his  atten- 
tion to  Internet  privacy.  The  con- 
troversy over  Intel  Corp.'s  plan  for 
a  serial  number  in  its  Pentium  III 
microchip  processors  that,  theoret- 
ically, would  make  possible  tracing 
millions  of  computers  over  the  In- 
ternet, made  him  wonder  what 
other  tracking  might  already  be  oc- 
curring, 

He  found  that  Microsoft  Word, 
the  nation's  most  popular  word 
processor  program,  embedded  a 
hidden  electronic  identifier,  unique 
to  each  computer,  on  Word  docur 
ments. 

That  globally  unique  identifier, 
as  it  is  called,  was  sent  back  to  Mi- 
crosoft when  consumers  registered 
their  Microsoft  software,  Smith 
learned. 

Thus,  the  personal  information 
people  provided  upon  registration 
theoretically  could  be  linked  to  a 
particular  document  written  in 
Word. 

"I  said  'Holy  cow,  this  is  bad,'  " 
Smith  said.  "Not  that  anybody  was 
using  all  this  stuff,  but  this  in- 
teresting little  surveillance  system 
was  all  in  place"  if  ever  someone 
wanted  to  use  it. 

Smith  contacted  Microsoft.  The 
Redmond,  Wash. -based  software 
gianl  "right  off  the  bat  realized  this 
was  not  a  good  situation,"  Smith 
said.  The  company  stopped  new 
versions  of  its  software  from 
stamping  documents  with  the 
unique  numbers. 

Microsoft  spokeswoman  Carol 
Sacks  said,  "The  fact  is,  Richard  is 
a  technical  expert,  and  we  respect 
what  he  does.  We  believe  (his  ef- 
forts) are  intended  to  help  streng- 
then consumers'  privacy  protec- 
tion, and  this  is  an  important  issue 
to  all  of  us." 

In  October,  Smith  found  soft- 
ware by  Seattle-based  Real  Net- 
works doing  something  similar. 
Real  Networks'  software  com- 
presses and  decompresses  large 
sound  and  video  files  for'  transmis- 
sion over  the  Internet. 

Another  feature  of  the  compa- 
ny's Real  Jukebox  software  allows 
people  who  listen  to  compact  discs 
on  their  computers  to  transfer  mu- 
sic from  the  discs  to  their  hard 
drives. 

Smith  delected  that  when  he 
placed  a  compact  disc  into  his  com- 
puter, the  Real  Jukebox  software 
automatically  transmitted  his  ma- 
chine's unique  identifier  and  his 
musical   selections   to    Real    Net- 
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Techie  Avenger  to  the  rescue 

Cybersleuth  aims  to  expose  surveillance  of  consumers  by  softivare  makers 


By  FRANK  JAMES 
CHICAGO  TRIBUNE 

Richard  M.  Smith  is  a  software  expert  who 
doesn't  fully  trust  his  own  kind.  So  he  has 
launched  a  personal  crusade  to  expose  technol- 
ogy practices  that  threaten  the  piivacy  of  mil- 
lions of  Internet  users. 

The  retired  co-founder  of  a  maker  of  special- 
ized software  for  industry,  he  has  a  growing  rep- 
utation as  one  of  the  Internet's  premier  privacy 
defenders.  He  has  essentially  become  the 
Techie  Avenger  for  millions  of  less  savvy  Inter- 
net users  who  surf  unaware  of  how  much  of 
their  personal  information  is  silently  being 
gathered. 

Smith  has  unmasked  techniques  employed  by 
some  of  the  Internet's  best  known  companies  — 
including  Microsoft  Corp.  and  Real  Networks  — 
to  invisibly  retrieve  information  from  Internet 
users'  computers  in  ways  those  firms  didn't  fully 
disclose  until  Smith  raised  questions. 

He  discovered  that  software  made  by  a  subsid- 
iary of  Amazon.com,  Alexa  Internet,  ostensibly 
designed  to  help  InterrieTshoppers  fina  the  best 
deals  and  product  information,  also  secretly 
gathered  personal  information  on  the  user. 

Smith  resented  the  intrusion 

Smith,  46,  filed  a  complaint  with  the  Federal 
Trade  Commission  after  discovering  that  Alexa's 
zBubbles  software  harvested  information  about 
his  activities  on-line  and  transmitted  it  back  to 
Alexa. 

Besides  his  e-mail  and  physical  address, 
Alexa's  software  surreptitiously  recorded  his  sis- 
ter's phone  number  when  he  used  his  computer 
to  call  her.  It  noted  his  purchase  of  a  Boston-to- 
Las  Vegas  airline  ticket,  the  DVDs  he  consid- 
ered buying  from  an  on-line  retailer  and  the 
information  he  typed  in  to  confirm  his  teenage 
daughter's  flight  home  from  Philadelphia. 

All  this  was  done  without  notice  to  him  from 
Alexa  that  his  personal  data  was  being  retrieved, 
he  said. 

"It  was  one  of  the  more  intrusive  pieces  of  soft- 
ware I've  ever  seen,"  said  Smith. 

Said  Brewster  Kahle,  Alexa's  chief  executive: 
"Our  users'  privacy  is  of  the  utmost  importance 
to  us,"  but  declined  further  comment,  citing  the 
complaint  before  the  FTC. 

Interviewed  in  the  rambling  frame  house  in  a 
Boston  suburb  that  he  shares  with  his  Russian- 
born  wife,  teen-age  daughter  and  standard  poo- 
dle, Smith  said  his  mission  is  a  simple  one. 

"I  want  to  show  how  much  monitoring  is  being 


done  so  we  can  make  good  decisions  about 
whether  we  want  this  or  not,"  Smith  said. 

"If  we  talk  to  marketing  folks  who  are  involved, 
they  say:  'Oh,  there's  no  problem  here.  It's  all  for 
your  own  good.  And  don't  ask  loo  many  ques- 
tions.' What  I  like  to  do  is  ask  all  the  questions," 
he  said. 

Two  fathers  sired  Web  privacy  problem 

The  Web  privacy  problem,  Smith  said,  has  two 
fathers.  Internet  companies  often  are  given  high 
stock  values  in  part  because  of  the  personal 
information  they  have  on  current  and  prospec- 
tive customers.  So  there  is  great  incentive  for 
them  to  collect  such  data,  he  said. 

The  other  is  diat  software  engineers  by  nature 
like  to  do  their  own  tiling.  Software  writers  "sort 
of  create  their  own  little  world  widi  software. 
They  write  the  rules.  The  last  thing  in  the  world 
they  want  to  be  told  is  what  to  do,"  Smith  said. 

He  foresees  legislators  eventually  passing  laws 
that  tell  software  companies  what  kind  of  infor- 
mation they  can  and  can't  "transmit  up  and  down 
the  wire,"  widioul  the  users'  informed  consent, 
as  well  as  ethical  training  for  software  develop- 
ers, he  said. 

Smith,  who  sits  on  the  Federal  Trade  Commis- 
sion's Advisory  Committee  on  On-line  Access 
and  Security,  started  thinking  about  Internet 
security  years  ago  when  he  ran  Phar  Lap  Soft- 
ware Inc.,  a  Cambridge,  Mass.,  firm  named  for  a 
famous  Australian  racehorse. 

He  focused  mainly  on  software  bugs  that  left 
computers  vulnerable  to  hackers  and  viruses.  It 
was  Smith  who  last  year  uncovered  the  name  of 
the  Melissa  e-mail  virus'  creator,  David  L.  Smith, 
and  passed  it  along  to  authorities. 

A  year  ago,  he  turned  his  attention  to  Internet 
privacy.  The  controversy  over  Intel  Corp ,'s  plan 
for  a  serial  number  in  its  Pentium  III  microchip 
processors  that,  theoretically,  would  make  possi- 
ble tracing  millions  of  computers  over  the  Inter- 
net, made  him  wonder  what  other  tracking 
might  already  be  occurring. 

He  found  that  Microsoft  Word,  the  nation's 
most  popular  word  processor  program,  embed- 
ded a  ludden  electronic  identifier,  unique  to  each 
computer,  on  Word  documents. 

That  globally  unique  identifier,  as  it  is  called, 
was  sent  back  to  Microsoft  when  consumers 
registered  their  Microsoft  software,  Smith 
learned. 

Thus,  the  personal  information  people  pro- 
vided upon  registration  could  theoretically  be 
linked  to  a  particular  document  written  in  Word. 

"I  said  'Holy  cow,  this  is  bad,'  "  Smith  recalled. 


"Not  that  anybody  was  using  all  this  stuff,  but 
this  interesting  little  surveillance  system  was  all 
in  place"  if  ever  someone  wanted  to  use  iL 

Smith  contacted  Microsoft.  The  Redmond, 
Wash.-based  software  giant  "right  off  the  bat 
realized  this  was  not  a  good  situation,"  Smith 
said.  The  company  stopped  new  versions  of  its 
software  from  stamping  documents  with  the 
unique  numbers. 

Carol  Sacks,  a  Microsoft  spokeswoman,  said, 
'The  fact  is,  Richard  is  a  technical  expert,  and 
we  respect  what  he  does.  We  believe  (his 
efforts)  are  intended  to  help  strengthen  consum- 
ers' privacy  protection,  and  this  is  an  important 
issue  to  all  of  us." 

Transmission  was  no  music  to  his  ears 

Last  October,  Smith  found  software  by  Real 
Networks,  the  Seattle-based  company,  doing 
something  similar.  Real  Networks'  software 
compresses  and  decompresses  large  sound  and 
video  files  for  transmission  over  the  Internet. 

Another  feature  of  the  company's  Real  Jukebox 
software  allows  people  who  listen  to  compact 
discs  on  their  computers  to  transfer  music  from 
the  discs  to  their  hard  drives. 

Smith  delected  that  when  he  placed  a  compact 
disc  into  his  computer,  the  Real  Jukebox  soft- 
ware automatically  transmitted  his  machine's 
unique  identifier  and  his  musical  selections  to 
Real  Networks. 

Since  Real  Net-works  had  his  name  and  other 
personal  information  from  his  registration,  "it 
put  them  in  a  position  of  being  able  to  build  a 
database  of  what  CDs  I  was  listening  lo,"  Smith 
said.  He  alerted  the  media  and  a  controversy 
ensued.  In  response,  Real  Network  disabled  the 
technology. 

Real  Networks  didn't  challenge  Smith's  facts, 
just  his  conclusions.  "He  seemed  to  assume  that 
Real  Networks  was  monitoring,  and  that  was  not 
the  case,"  said  Allen  Mayer,  a  Real  Networks 
spokesman. 

When  Smith  went  public,  Real  Networks  had 
already  planned  a  software  fix  to  stop  the  trans- 
mitting of  the  personal  information  and  update 
its  privacy  policy,  Mayer  said.  Smith  had  criti- 
cized the  privacy  policy  posted  on  the  company's 
Web  site  for  not  mentioning  die  practice. 
'There's  no  question  that  Smith's  work  sped  up 
the  timetable,"  Mayer  said. 

Smith  commented,  "What's  interesting  to  me  is 
when  a  lot  of  these  monitoring  systems  are 
exposed  to  the  sunshine,  companies  seem  to 
immediately  stop  doing  it." 
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www.amazon.com 

HEADQUARTERS:  Seattle,  WA 
FOUNDED:  1 994  as  Cadabra,  1 995 
incorporated  as  Amazon.com 
LAUNCH:  July  1995 
IPO:  May  1997 
OFFERING:  $54  million 

Revreraue 

FY  19^6:  $15.7  million 

FY  1997:  $147.8  million  (841%  increase) 

FY  T 998:  $61 0  million  (3 1 3%  increase) 

FY  1999:  $1;6  billion  (162%  increase) 

:  ijieoufrive-  Officers 
JEFF  BEZOS,  Founder  and  CEO 
WARREN  JENSON,  CFO  and  Senior  Vice 
President: 
RICK  DALZELL,  CIO 
JOE  GAU.I,  President  and  COO 
DAVJDRISHER,  Senior  Vice  President  of 
Product  Development 
JEFF  WIUCE,  Vice  President  and  General 
Manager,  Operations 
MARK  BRITTO,  Vice  President,  Strategic 
Alliances 

EMPLOYEES:  7,500 

MAIN  BUSINESS:  Internet  retailer  of  books, 
music,  videos,  toys.  Also  runs  auction  site, 

CHIEF  COMPETITION:  Barnes  &  Noble, 
CDNow,  eBay,  Reel.com,  eToys 

NUMBER  OF  PRODUCTS:  18  million 


Customers 

1996:  180,000 

1997:  1.5  million  (733%  increase) 

1998:  6.2  million  (313%  increase) 

1999:  17  million  (174%  increase) 

SALES  RETENTION/CONVERSION  RATES: 

73%  of  orders  from  repeat  customers 

Hei  lass   - 

FY  1996:  $5.8  million 

FY  1997:  $27.6  million  (376%  increase) 

FY  1998:  $124.6  million  (355%  increase) 

FY  1999:  $719  million  [477%  increase) 

Aeqwasafens 

PlanetAH,  August  1997 

Junglee,  August  1 997 

Bookpages,  April  1 998 

Telebook,  April  1 998 

Internet  Movie  Database,  April  1 998 

Alexa  Internet,  April  1999 

ExcJTdnge.com,  April  1 999 

Accept.com,  April  1 999 

Back  to  Basics  Toys,  November  1999 

•  Major  lewesSTOSnts  [%  ownership).. 
Drugstore.com  (27%) 
Gearxom"(49%} 
HomeGrocer.com  (28%) 
Kozmo.com,  (23%) 
Pets.com  (30%) 

Source:  Amazon.com;  Get  Big  Fast  by  Robert  Spector 
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Cashless  and  ready  to  close  up  shop, 

Amazon.com  CEO  Jeff  Bezos  ditched  his 
business   plan  and  figured  out  a  smart  way  to  lose  money. 

By  Robert  Spector 

ILLUSTRATIONS  BY  CHARLENE  POTTS 

p  July  16,  1995,  a  year  after  he  moved  from  New  York 
ito  Seattle  to  pursue  his  dream — and  after  almost  eight 
months  of  creating,  building,  and  beta-testing  his 
ebut  Website,  Amazon.com  finally  launched.  Little  did 
outside  world  realize,  however,  that  a  quiet  crash 
seemed  just  as  probable  at  that  moment  as  a  roaring  success. 
Amazon.com  began  ringing  up  modest  but  promising  sales — 
$12,438  the  first  week  and  $14,792  the  second— but  by  the  third 
week,  when  sales  suddenly  plummeted  to  $9,548,  Bezos'  brainchild 
was  already  dangerously  cash-starved.  According  to  papers  filed  with 
the  Securities  and  Exchange  Commission,  from  July  5,  1994,  when 
it  was  founded,  to  the  end  of  1994,  Amazon.com  lost  $52,000;  the 
eventual  loss  for  1995  was  going  to  be  $303,000. 


Adapted  from  "Amazon.com:  Get  Big  Fast"  ($27,  HarperCollins,  April  '00). 
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ezos  had  been  funding  the  company 
out  of  his  own  pocket.  When 
Amazon.com  was  incorporated  in  the 
state  of  Washington  in  July  1994 
with  Bezos  as  founder,  president, 
chief  executive  officer,  and  chairman 
of  the  board,  he  purchased 
10,200,000  shares  of  common  stock  for  an  aggregate 
price  of  $10,000,  and  also  made  a  $15,000  interest- 
free  loan  to  the  company.  He  later  followed  up  with 
another  $29,000  loan  in  November,  according  to  public 
records.  During  this  period,  he  personally  guaranteed 
the  obligations  of  the  company  under  a  merchant 
account  with  Seafirst  Bank  of  Seattle. 

But  he  couldn't  keep  going  back  to  his  own  well.  In 
February  1995,  he  had  sold  582,528  shares  of  common 
stock  to  his  father,  Miguel  A.  Bezos,  at  a  price  per 
sj^of  $0.1717.  The  infusion  of  $100,020  bought 


about  to  be  closed,  "it  was  a  huge  crisis;  a  critical  stage 
for  the  company" 

Despite  that  grim  situation,  "I  don't  know  if  Jeff  ever 
worried  about  financing  because  he  was  so  focused  on 
the  business  plan,"  marveled  Dillon.  "He  was  just  so 
sold  on  where  he  was  going  that  he  just  naturally 
assumed  that  it  would  take  care  of  itself."  Seeing  how 
committed  Bezos  was  "was  powerful  to  me." 

To  illustrate  that  confidence,  Bezos  was  fully  prepared 
to  wait  for  the  rest  of  the  world  to  come  around  to  his 
idea.  He  was  ready  and  willing  to  lose  money  for  five 
years  before  turning  a  profit,  and  if  he  did  make  any 
profits,  they  would  be  immediately  plowed  back  into  the 
company  to  improve  the  Website.  "There's  a  whole  set 
of  habits  that  need  to  be  learned  for  people  who  want  to 
shop  in  this  way,"  he  said.  "The  landscape  of  people 
who  do  new  things  and  expect  them  to  be  profitable 
quickly  is  littered  with  corpses." 


"He  was  out  of  personal  funds,  he  was  out 
of  his  family's  ability  [to  fund  the  company] 


jy 


the  company  time  and  enabled  it  to  make  a  move  out 
of  a  converted  garage  in  the  home  that  Jeff  and  his 
wife,  Mackenzie,  were  renting  in  Bellevue, 
Washington,  and  into  a  400-square-foot  office/ware- 
house in  the  SoDo  section  of  Seattle.  In  July  1995, 
Amazon.com  sold  an  additional  847,716  shares  of 
common  stock  to  the  Gise  Family  Trust  (of  which  Jeff's 
mother,  Jacklyn  Gise  Bezos,  was  trustee  and  beneficia- 
ry) at  the  same  price  per  share  of  $0.1717.  "We  didn't 
invest  in  Amazon,"  Jackie  Bezos  would  later  tell  Time 
magazine.  "We  invested  in  Jeff." 

Running  on  fumes 

Despite  the  infusion  of  capital,  Amazon.com  was  spend- 
ing more  money  than  it  was  talcing  in  and  Jeff  was  "dead 
broke"  in  that  summer  of  1995,  according  to  Eric 

*n,  who  was  then  a  stockbroker  for  Smith  Barney  in 
e,  and  a  trusted  adviser  in  the  nascent  company. 
"He  was  out  of  his  personal  funds,  he  was  out  of  his 
family's  ability  [to  fund  the  company],  and  he  was 
[going  to  be]  out  of  money  in  45  days."  With  the  doors 


Despite  his  cool  confidence,  he  did  need  money.  He 
told  his  friend,  Nick  Hanauer,  who  had  wanted  to  invest 
ever  since  Bezos  came  up  with  the  idea — that,  yes,  he 
did  need  to  raise  money,  and  that  he  was  trying  to 
decide  whether  to  get  it  directly  from  venture  capitalists 
(most  likely  from  Silicon  Valley)  or  from  a  round  of 
financing  from  local  Seattleites.  Hanauer,  then  a  34- 
year-old  Seattle  businessman,  had  encouraged  Bezos  to 
move  from  New  York  to  Seattle,  and  had  become  an 
adviser  to  the  company.  Hanauer,  who  had  a  wide  circle 
of  personal  and  business  relationships  in  town,  argued 
for  the  local  route,  and  ultimately  convinced  Bezos,  who 
in  his  12  months  in  Seattle  had  come  to  know  relatively 
few  locals  in  a  position  to  invest. 

Concentrating  the  raising  of  funds  in  Seattle  was  not 
going  to  be  easy  because,  at  that  time,  the  investment 
"angel"  community  in  the  city  was  infinitesimal  com- 
pared to  Silicon  Valley.  With  few  exceptions,  the  Seattle 
area's  legion  of  Microsoft  millionaires  hadn't  yet  fully 
unleashed  their  investment  power  on  cash-starved  local 
startups. 
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"Today,  il  you  want  to  raise  a  million  or  $5  million 
for  a  good  idea,  with  good  management,  I  could  do 
that  for  you  in  10  phone  calls,"  said  Hanauer.  "But 
back  then  it  was  hard.  That  was  because  no  one  had 
done  an  Amazon.com.  Today,  Amazon.com  is  the 
example  people  use  to  prove  that  you  can  make  hun- 
dreds of  millions  of  dollars  on  a  small  angel  investment. 
It's  the  metaphor  for  angel  investing.  But  we  didn't  have 
i lint  in  1995-  So  getting  people  to  write  checks  for 
$20,000  or  $40,000  or  $60,000  or  $100,000  was  hard, 
haul,  hard." 

Hanauer  began  setting  up  pitch  meetings  for  Jeff 
with  potential  investors  that  Hanauer  knew  personally 
and  with  wealthy  people  who  had  been  recommended 
by  Hanauer's  friends.  The  first  phone  call  Hanauer  made 
was  to  Eric  Dillon,  a  tall,  blond  stockbroker  in  his  mid- 
thirties  who  had  participated  in  other  venture  capital 
deaJs.  Dillon's  immediate  reply  was  that  he  was  not 
nterested,  but  agreed  to  meet  with  Bezos  as  a  courtesy 
persistent  Hanauer.  Dillon  fully  expected  his 
:ment  with  Bezos  and  Amazon.com  would  go  no 
further  than  that  one  meeting. 


Bezos  that  there  were  several  things  wrong  with  his  pre- 
sentation. Chief  among  them  was  that  Bezos  didn't  talk 
about  his  own  credentials  and  track  record.  "He  was 
either  not  confident  enough  or  too  self-conscious  or  just 
didn't  understand  how  to  sell  people  well  enough  to 
bring  that  to  the  fore,"  said  Hanauer.  "Jeff  was  the  only 
thing  we  had  to  sell.  Nobody  knew  what  the  Internet 
was,  and  being  in  the  book  business  oil  the  Internet  in 
1995  just  didn't  sound  like  that  big  of  an  idea.  It  was 
sort  of  an  amusing  idea  at  the  time.  But  people  don't 
want  to  invest  in  amusing  ideas." 

Dillon  concurred  that  he  wasn't  particularly  impressed 
with  Bezos'  presentation,  which  he  described  as  "totally 
scattered.  It  went,  'Hi,  we  have  an  online  bookstore  and 
1  think  we're  going  to  do  well.'"  But  whatever  Bezos 
lacked  in  his  presentation  did  not  ultimately  matter  to 
Dillon,  whose  recollection  of  some  of  the  other  details  of 
that  first  meeting  differs  from  Hanauer's.  "Jeff  got  me," 
said  Dillon,  who  went  into  that  meeting  thinking  there 
was  no  chance  he  would  ever  get  involved  with 
Amazon.com.  "I  was  fascinated  with  Jeff  Bezos  from  the 
get-go.  He  had  a  burning  passion  and  a  raw  intelligence 


He  was  ready  and  willing  to  lose  money 
for  five  years  before  turning  a  profit. 


!;.eas'swii?.:3  to  p?,v::.h 

Before  that  meeting,  Hanauer  was  concerned  about 
Bezos'  performance  because,  in  Hanauer's  estimation,  his 
friend  was  not  particularly  proficient  at  the  fine  art  of 
asking  people  for  money.  "He  didn't  know  how  to  pre- 
sent himself  very  well,"  Hanauer  recalled.  "Jeff  has 
always  been  a  compelling  guy.  But  how  compelling  he 
was  as  a  person  was  not  as  obvious  to  most  people  as  it 
was  to  me.  I  knew  as  soon  as  I  met  Jeff  Bezos  that  he 
was  going  to  be  a  rock  star.  But  if  you  had  asked  most  of 
the  people  who  had  met  him  in  Seattle  in  1995  whether 
he  was  going  to  be  a  rock  star,  I'd  have  been  the  only 
one."  In  Hanauer's  opinion,  Bezos  was  not  projecting 
"lutfkman  he  was,  how  accomplished  he  was,  and  how 

9  I" 
Alter  the  first  meeting  with  Dillon,  Hanauer  told 


that  I  had  rarely  witnessed.  Additionally,  he  had  just 
come  from  D.E.  Shaw.  One  of  the  businesses  that  I  had 
started  was  an  investment  pool  that  invested  exclusively 
in  hedge  funds,  so  we  had  that  in  common.  He  was  one 
of  the  few  people  who  understood  the  type  of  investing 
that  I  was  doing,  so  we  talked  about  that.  Being 
involved  with  Wall  Street  as  long  as  I  had,  I  was  able  to 
understand  his  career  at  Bankers  Trust  and  the  other 
places  he  had  worked." 

The  most  convincing  factor  to  Dillon  was  that  Bezos 
had  given  up  a  scven-figurc-a-year  job  at  D.E.  Shaw  to 
take  a  flyer  on  the  Internet.  "The  fact  that  he  had  left 
that  kind  of  [situation]  overwhelmed  me,"  said  Dillon. 
"It  gave  me  a  very,  very  powerful  urge  to  get  involved 
with  this  guy." 

As  part  of  his  presentation,  Bezos  told  Hanauer, 
Dillon,  and  other  potential  investors  that  he  had  calcu- 
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hat  Amazon.com  could 
do  online  was  implement 
a  business  model  based 
upon  managing  a  fast- 
turning  inventory  from  a 
centralized,  low-overhead 
operation. 

The  model  was  spectacularly  capital-efficient.  On  day 
zero,  an  ordered  book  would  enter  Amazon.com  inven- 
tory. Eighteen  days  later  (on  average)  a  customer  would 
buy  it.  Two  days  after  that,  the  credit  card  company 
would  transfer  the  money  into  the  bank  account  of 
Amazon.com,  which  would  have  53  days  to  pay  the  sup- 
plier. That  meant  that  Amazon.com  would  have  a  nega- 
tive operating  cycle  of  33  days. 


external  infrastructure  already  existed  in  the  form  of  cus- 
tomers' personal  computers  and  connections  to  the 
Internet,  enabling  the  company  to  reach  a  worldwide 
audience  from  one  central  location.  With  many  of  its 
costs  already  fixed  (with  the  exception  of  order-fulfill- 
ment and  customer  service),  the  company  could  gener- 
ate cash  through  sales  that  would  help  offset  cash  used 
for  operating  expenses. 

As  a  result,  if  Bezos  was  right,  Amazon.com  would 
have  more  cash  to  invest  in  systems  and  services,  such  as 
branding,  co-marketing,  enhanced  product  features,  and 
customer  service.  (Of  course,  these  variable  costs  would 
later  turn  out  to  be  enormously  expensive.)  And  as 
microchips  got  cheaper  and  faster,  and  bandwidth 
widened,  even  greater  scale  and  efficiency  could  be 


"Today,  if  you  want  to  raise  $5  million,  I  could 
do  that  in  10  calls.  Back  then,  it  was  hard." 


In  a  physical  bookstore,  the  customer  purchases  a 
book,  on  average,  161  days  after  the  book  is  in  stock. 
The  store  gets  its  money  on  day  163,  and  it  has  to  pay 
its  supplier  on  day  84,  giving  it  a  positive  operating 
cycle  of  79  days. 

By  comparison,  Amazon. corn's  negative  operating 
cycle  of  33  days  would  give  it  a  huge  cash  flow  advan- 
tage. Because  the  company  didn't  order  most  books  until 
after  it  sold  them,  it  could  potentially  turn  over  its  rela- 
tively small  stock  (primarily  bestsellers  at  that  time)  1 50 
times  a  year,  compared  with  an  inventory  turnover  of 
less  than  four  times  for  traditional  stores.  Amazon.com 
receives  its  money  very  quickly  by  credit  card,  so  for 
about  a  month,  it  earns  a  "float"  of  interest-free  money. 
That  money,  which  adds  up  to  tens  of  millions  of  dollars 
a  year,  helps  pay  a  significant  amount  of  Amazon. corn's 
overhead. 

Scaled  for  success 

Amazon.com  was  a  business  that  was  going  to  be  built 
on  the  altar  of  scale,  with  a  core  belief  that  as  it 
increased  the  number  of  customers,  costs  would  not 
increase.  It  seemed  to  make  sense.  Unlike  a  brick-and- 
mortar  store,  a  Website  was  inexpensive  to  build.  The 


achieved.  Finally,  Bezos  knew  that  by  being  able  to  keep 
track  of  the  purchasing  patterns  (and  other  pertinent 
data)  of  online  consumers,  he  could  provide  a  unique 
level  of  personalized  service  as  well  as  better  anticipate 
customer  demand  for  products. 

Confident  that  the  greater  the  growth,  the  greater  the 
opportunities  to  make  the  system  more  efficient,  Bezos 
believed  that  Amazon.com  had  to  grow  as  quickly  as 
possible  before  the  competition  realized  what  was  hap- 
pening. 

Although  he  wasn't  about  to  make  any  firm  commit- 
ments, Alberg  was  impressed  with  Bezos,  who  kept  in 
touch  with  Alberg  by  sending  him  Amazon.com's  weekly 
sales  figures,  and  telling  him  when  orders  would  come  in 
from  a  new  state  or  new  country.  "In  retrospect,  it's  easy 
to  say  it  was  clear  how  smart,  dedicated,  and  analytical 
he  was,"  said  Alberg.  "He  seemed  to  have  the  thing  well 
thought  through.  You  know  when  people  have  successful 
CEO  characteristics  only  after  they've  been  in  it  for  a 
while.  On  Day  One,  people  thought  Bill  Gates  was  very 
smart,  but  they  didn't  know  he  was  going  to  be  so  good 
at  being  a  CEO.  The  same  with  Jeff.  Jeff  was  good  with 
numbers,  but  probably  the  strength  of  the  presentation 
was  not  in  the  financial  analysis,  because  it  wasn't  the 
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most  sophisticated  [plan].  However,  his  analysis  of  the 
marketplace  was  good  because  he  had  an  answer  to  a  lot 
of  the  questions.  On  the  other  hand,  the  projections 
that  were  in  the  original  financial  statements  were  unbe- 
lievably modest  compared  to  what  happened — and  they 
showed  a  profit.  Quickly." 

Bezos'  1995  proposal  included  two  scenarios:  moder- 
ate growth  and  rapid  growth.  His  moderate  growth  plan 
projected  a  profit  of  $49,504  by  the  end  of  the  fiscal 
year  ending  September  30,  1997,  on  sales  of 
$1 1,522,584;  the  fast-growth  scenario  was  for  a  profit  of 
$142,605  on  sales  of  $17,735,703  in  the  same  time 
period.  The  fast-growth  projection  didn't  show  the  com- 
pany topping  $100  million  in  sales  until  September  30, 
2000.  Amazon. corn's  eventual  success  would  soon  make 
those  numbers  laughable. 

But,  privately,  Bezos  confided  his  optimism  to  his 
ployees.  "I  remember  him  telling  me  that  he  was 
oing  to  build  a  billion-dollar  company  by  the  year 
2000,"  said  Nicholas  Lovejoy,  who  was  the  fifth  employ- 
ee hired  by  Bezos.  "I  thought  it  was  ridiculous,  but  at 
the  same  time,  I  loved  his  energy.  He  really  meant  it." 

lthough  he  didn't  mention  it  to 
potential  investors,  Bezos  always 
knew  that  Amazon.com  was  even- 
tually going  to  be  much  more  than 
books — and  he  needed  money. 

£"I  need  you  to  write  a  check,"  a 
;is,  frustrated  Bezos  told  Hanauer.  "I 
need  somebody  to  make  a  move.  No  one  will  make  a 
move.  It  takes  one."  Hanauer  agreed  to  write  a  check  in 
exchange  for  stock  options.  Soon  after,  another  20  peo- 
ple also  wrote  checks,  including  Tom  Alberg.  Most  of 
the  amounts  were  for  $30,000,  according  to  one  of 
those  pioneering  investors.  By  the  end  of  1995,  Bezos 
was  finally  able  to  secure  $981,000  in  funding.  "If  he 
had  to  raise  $5  million,"  said  Alberg,  "he  could  never 
have  done  it." 

Because  Bezos  was  the  only  Amazon.com  employee 
with  any  previous  corporate  management  experience,  in 
December  1995  he  asked  Alberg,  Hanauer,  and  Dillon 

fc|form  a  board  of  ex-officio  advisers  to  the  company. 

™By  that  point,  the  Amazon.com  Website  was  getting 
2,200  visits  a  day,  which  was  significant  in  1995  (it 
would  grow  to  80,000  a  day  by  spring  1997).  As  the 
company  began  1996,  "Stuff  is  rolling  out  the  door, 


orders  are  going  up,  and  we're  beginning  to  start  to 
understand  what  has  to  happen  next,"  said  Paul  Barton- 
Davis,  a  former  staff  programmer  in  the  University  of 
Washington's  Computer  Science  &  Engineering  Depart- 
ment who  was  the  second  employee  Bezos  hired. 
(Barton-Davis  and  Shel  Kaphan  built  the  Amazon.com 
Website  and  amassed  the  database.) 


'When  I  first  got  involved 
[in  the  company] ,  Jeff  was 
focused  on  the  fact  that 
we  could  make  profits 
right  away. 
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By  early  1996,  Amazon.com  was  on  course  for  an 
annual  revenue  run  rate  of  about  $5  million.  "We  start- 
ed to  see  the  evidence  of  how  quickly  the  business  was 
growing  without  us  stirring  the  pot  any,"  said  Dillon. 


1 
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n  early  1996,  Ramanan  Raghavendran,  who 
was  then  a  senior  associate  at  General  Atlantic 
Partners,  a  large  private  equity  investment 
firm  based  in  Greenwich,  Connecticut,  was 
surfing  the  Web  and  came  upon  the 
Amazon.com  site,  which  was  still  an  essentially 
unknown  entity  to  anyone  who  wasn't  a  mem- 
ber of  the  digerati.  "I  just  picked  up  the  phone  and 
cold-called  Jeff  Bezos,"  said  Raghavendran,  who  was  the 
first  representative  of  a  venture  capital  fund  to  contact 
Bezos.  Raghavendran  was  the  person  most  responsible 
for  pursuing  Internet-related  investments  at  General 
Atlantic,  a  firm  that  specialized  in  funding  software 
companies.  "I  had  a  phenomenal  conversation  with  Jeff. 
We  got  along  like  a  house  on  fire  because  I  completely 
bought  into  his  vision." 

"We  were  amazed  that  someone  would  have  an 
interest,"  said  Dillon.  "Right  away,  Jeff  asked,  What 
does  this  mean?  What  are  we  really  worth?'" 
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Jllons 


re-engineering 


what  you  spent 
millions  acquiring? 


Raghavendran  and  sonic  colleagues  from 
General  Atlantic  flew  to  Seattle  to  meet 
with  Bezos,  Alberg,  and  Dillon.  "We  con- 
tinued to  fall  in  love  with  the  business  and 
with  Jeff  in  particular,"  Raghavendran 
recalled.  A  short  time  later,  Raghavendran 
called  Bezos  from  Hong  Kong,  and  outlined 
the  terms  of  a  deal  between  Amazon.com 
and  General  Atlantic.  To  the  best  of  Dillons 
recollection,  General  Atlantic  offered  to 
invest  $1  million  at  a  market  capitalization 
for  Amazon.com  of  $10  million. 


realize  that  ibis  thing  was  much  bigger  than 
we  ever  thought  it  could  be;  and  that  we 
were  the  market  leader  and  we  were  going  D 
do  whatever  it  takes  to  retain  our  position  a 
the  market  leader.  That's  when  we  all  said, 
'We're  going  for  it!  We're  going  to  build  a 
franchise  and  we're  going  to  do  it  right.'  We 
changed  our  whole  focus  to  one  that  was 
driven  by  momentum.  We  had  the  momen- 
tum and  we  had  to  keep  the  momentum. 
We  needed  to  bring  in  money.  We  needed  t 
be  the  first  one  to  do  national  advertising." 


lazon 

But 
'est  ' 


an  amusin: 


people 
amusin! 


don't  want  to 


Raghavendran,  now  a  general  partner  at 
Insight  Capital  Partners,  declined  to  confirm 
these  exact  number,  but  did  acknowledge 
that  "the  investment  size  was  larger  [than 
what  Dillon  recalled],  but  the  valuation 
range  is  not  far  from  what  we  had  thought." 

The  General  Atlantic  offer  was  a  water- 
shed for  Amazon.com.  "We  thought  it 
would  be  fabulous  if  we  could  get  $20  mil- 
lion or  $30  million,"  said  Alberg.  The 
Amazonians  quickly  came  to  the  realization 
that  "if  they're  willing  to  give  us  money,  it 
makes  sense  to  get  a  bunch  of  money  and 
build  this  business  as  fast  as  we  can,"  said 
Dillon.  "When  I  first  got  involved  [in  the 
company],  Jeff  was  focused  on  the  fact  that 
we  could  make  profits  right  away."  But  when 
they  started  getting  phone  calls  from  venture 
capital  companies,  the  Amazon.com  princi- 
pals reached  what  Dillon  described  as  "a 
crossover  point"  when  "we  stopped  talking 
about  profits  and  we  started  talking  about 
dominating  the  market"  and  creating  a 
multibillion-dollar  business.  "We  started  to 


"Get  Big  Fast"  was  quickly  becoming  the 
mantra  at  Amazon.com.  When  the  compan 
put  on  its  first  employee  picnic  in  1996, 
Bezos  handed  out  T-shirts  to  everyone  in 
attendance.  Emblazoned  on  each  shirt  were 
the  words  "Get  Big  Fast." 

The  momentum  began  picking  up  on 
May  16,  1996,  when  Amazon.com  and  Jeff 
Bezos  were  the  lead  story  on  the  front  page 
of  The  Wall  Street  Journal 'with  the  headline 
"How  Wall  Street  Whiz  Found  a  Niche 
Selling  Books  on  the  Internet."  The  article 
raved  that  the  Website  "has  become  an 
underground  sensation  for  thousands  of 
book-lovers  around  the  world,  who  spend 
hours  perusing  its  vast  electronic  library, 
reading  other  customers'  amusing  online 
reviews,  and  ordering  piles  of  books."  The 
overwhelming  positive  story  talked  about 
how  Amazon.com  had  customers  in  66 
countries,  including  Bosnia,  where  orders 
were  placed  by  more  than  two  dozen  home- 
sick American  soldiers  stationed  in  that  war 
torn  country.  Army  I.t.  Clyde  Cochrane  III 


emailed  Amazon.com  from  Bosnia:  "This 
will  help  make  this  deployment  a  little  more 
tolerable." 

And  how.  The  Journal  article  created  an 
incredible  spike  in  traffic  that  nearly  over- 
whelmed the  site  and  the  company.  "The  size 
of  the  business  basically  doubled  that  day," 
recalled  Nicholas  Lovejoy.  "That  was  a  perma- 
nent shift.  The  business  kept  growing  the  next 
day  and  the  next  day  and  the  day  after  that." 

Bezos  would  later  characterize  that  Journal 
story  as  both  a  blessing  and  a  curse.  Because 
Amazon.com  was  not  yet  spending  money 
on  advertising,  and  was  relying  strictly  on 
word-of-mouth  and  public  relations,  the  arti- 
cle was  a  blessing  because  it  generated  a  lot  of 
exposure  and  awareness  for  the  company  and 
duced  many  new  customers.  "If  we  treat- 
them  right,  those  people  became  evange- 
lists for  us,"  said  Bezos.  Jane  Radke  Slade,  an 
Amazon.com  customer-service  specialist, 
agreed:  "If  we  hadn't  been  on  the  cover  of 
The  Wall  Street  Journal and  most  people  had- 
n't seen  us  as  a  solvent  company,  they  would- 
n't be  handing  us  their  credit  cards." 

On  the  other  hand,  the  article  alerted 
Amazon. corn's  competition  to  the  fact  that 
the  company  existed. 

In  the  meantime,  Bezos  and  company 
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the  others  most  dearly  wanted  was  Kleiner 
Perkins  Caufield  &  Byers,  the  leading  VC 
firm  in  Silicon  Valley,  which  had  funded 
companies  such  as  Netscape  Communica- 
tions, Intuit,  Sun  Microsystems,  Compaq, 
Marimba,  @Home,  and  Macromedia. 
Kleiner's  most  illustrious  partner  was  the 
lanky,  bespectacled  I..  John  Doerr,  who  has 
been  dubbed  "the  avatar  of  the  Web"  and  is 
considered  by  many  as  the  person  who  rec- 
ognized the  potential  of  the  Internet  before 
virtually  everyone  else.  One  of  the  chief 
tenets  of  Doerr's  investment  strategy  was  to 
create  what  he  has  described  as  a  keiretsu — 
the  Japanese  term  for  a  network  of  general 
trading  firms  with  interlocking  directorships 
and  joint  investments  that  are  connected  by 
a  central  bank. 

"I  left  four  phone  messages  for  John  Doerr 
directly,"  Eric  Dillon  recalled.  "I've  been  in 
sales  all  my  life.  I  know  how  to  sell.  I  left  him 
the  most  sales-y  oriented  messages  you've  ever 
heard.  He  never  returned  any  of  my  calls." 

The  company  was  being  deluged  by  calls 
from  venture  capitalists  who  wanted  to  get 
involved.  "We  joked  that  we  were  going  to 
have  to  change  our  voice-mail  system  to  say, 
'If  you're  a  customer,  press  one.  If  you're  a 
VC,  press  two,'"  said  Bezos,  who  invited 
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deferred  a  decision  on  the  General  Atlantic 
offer.  Thanks  to  feedback  from  their  Wall 
Street  contacts,  the  Amazonians  were  getting 
positive  indications  of  what  was  going  on  in 
■kc  private  VC  funding  arena.  "We  figured 
PKt  pretty  quickly  that  we  should  be  think- 
ing north  of  $50  million  for  what  we  should 
raise  in  our  next  round,"  said  Dillon. 
The  venture  capital  firm  that  Bezos  and 


Doerr  up  to  Seattle  for  a  meeting  and  to 
lour  the  Amazon.com  operation.  1  he  two 
apparently  clicked  on  a  personal  basis,  bur 
Doerr  told  Bezos  that  he  thought  Bezos'  val- 
uation of  the  company  was  inflated.  No  deal 
was  immediately  forthcoming. 

In  the  meantime,  Bezos,  Dillon,  and  Leslie 
Koch  had  a  meeting  with  General  Atlantic  at 
the  VC's  midtown  Manhattan  office.  "I 


remember  sitting  with  Jeff  in  the  GA  offices  the  night 
before  the  meeting,  going  through  the  financial  model 
that  he  was  going  to  present,"  said  Ramanan 
Raghavendran.  "As  you  can  imagine,  it  was  an  outra- 
geous model.  He  portrayed  Amazon.com  growing  to 
$800  million  in  revenues  in  no  time  at  all.  I  said,  'Jeff, 
this  may  well  be  true,  but  for  a  group  of  rational 
investors,  you  want  to  tone  down  your  projections.'  He 
said,  'I  think  this  is  what  we're  going  to  do.'  In  hind- 
sight, he  overperformed  against  those  projections." 
Dillon  called  this  meeting  "the  final  dance"  with 
General  Atlantic.  "Jeff  was  having  me  be  the  fall  guy  in 
this  thing.  I  was  happy  to  do  it.  It  was  my  skill  set." 


most  prestigious  stretch  of  VC  real  estate].  No  one  will 
pay  attention.  Instead,  I'll  work  through  my  network  of 
friends  to  find  the  good  firms  and  best  fit  for  Amazon.'" 

General  Atlantic  came  back  with  a  valuation  of 
$50  million.  "Jeff  said,  'We  already  have  an  offer  of 
$50  million.  How  about  $70  million  or  $80  million?'" 
Alberg  recalled.  "The  theory  was  'Let's  just  test  this  mar- 
ket.' Then  Doerr  said,  'We  could  go  to  40  or  50,  but  we 
bring  a  lot  to  the  table  and  we  should  get  credit  for 
that.'  Then  [General  Atlantic]  proposed  a  $60  million  tc 
$70  million  evaluation,"  but  it  was  based  on  a  contin- 
gency to  what  a  future  initial  public  offering  could 
bring.  "They  had  this  offer  on  the  table.  We  had  a  term 
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'We're  only  going  to  sign  a  deal  with  you  guy? 
if  you  give  us  a  valuation  of  $100  million" 


After  an  hour  and  a  half  of  discussion,  it  came  down  to 
agreeing  upon  the  valuation  of  the  company.  "We  decid- 
ed before  the  meeting  that  we  would  take  money  from 
[General  Atlantic]  only  if  they  would  give  us  a  $100 
million  valuation.  I  didn't  say  a  thing  for  that  whole 
hour  and  a  half.  All  of  a  sudden,  every  eye  turns  to  me. 

"I  said,  'We  still  feel  that  we  should  do  more  due  dili- 
gence and  figure  out  what  our  best  path  is  in  taking 
money.  We're  only  willing  to  sign  a  deal  with  you  guys 
today  if  you're  willing  to  give  us  a  valuation  of  $  1 00  mil- 
lion.' Everybody  at  the  table  looked  as  though  we  had 
dropped  a  huge  dose  of  cyanide  down  their  throats.  They 
really  wanted  this  deal.  They  undersrood  Jeff  and  they 
understood  this  business.  But  it  was  too  far  out  of  the 
realm  of  possibility — ever.  We  came  up  with  the  figure  of 
$100  million  because  it  was  just  a  staggering,  outrageous 
stop-us-in-our-tracks  number.  Outside  of  that,  we  were 
still  going  to  do  our  due-diligence"  in  researching  other 
VC  companies.  "Afterwards,  Jeff  and  I  went  out  to  dinner 
and  we  just  laughed  all  night  long  about  their  reactions. 
In  the  annals  of  Amazon,  it  was  just  a  really  fun  day." 

Kleiner  was  not  yet  out  of  the  picture.  "We  had  to 
compete  like  crazy  for  the  right  to  invest  in  Amazon," 
said  Doerr.  "Jeff  approached  us  the  same  way  Intuit's 
Scott  Cook  did.  Jeff  said,  'I'm  not  going  to  publish  30 
business  plans  along  Sand  Hill  Road  [Silicon  Valley's 


sheet  proposal  from  them;  the  whole  works." 

Finally  the  lure  of  Kleiner  Perkins  tipped  the  scales. 
"Ultimately,  we  lost  out  for  two  reasons,"  said 
Raghavendran.  "One,  Kleiner  brings  a  phenomenal  foot 
print  in  the  Internet  space,  and  that's  pretty  compelling, 
and  two,  we  were  just  not  comfortable  at  the  valuations 
where  the  deal  ended  up  getting  done.  In  relation  to 
where  the  market  cap  ofAmazon.com  is  now,  it  was 
insignificant.  But  that's  20/20  hindsight.  I  would  have 
done  the  transaction  at  a  much  higher  valuation.  The 
reality  is  that  GA  was  constrained  by  its  own  investment 
discipline,  which  I  commend,  because  you  win  some 
and  you  lose  some." 

Bezos  and  company  decided  to  go  with  Kleiner,  whicl 
wasjhe  trophy  VC  fund.  But  before  agreeing  to  the 
deal,  Bezos  had  one  final  detail  to  be  settled:  Who  on 
Kleiner  would  join  the  Amazon.com  board?  Bezos  asked 
Alberg  who  he  should  ask  for.  "I  said  we  should  try  to 
get  John  Doerr,"  Alberg  recalled.  But  Bezos  said  that 
Doerr  indicated  he  wasn't  interested  in  joining  any  more 
boards.  "But  I  said  we  should  get  Doerr."  So  Bezos  said 
to  Kleiner  Perkins  that  Amazon.com  would  agree  to  the 
deal  only  if  Doerr  joined  the  board. 

Doerr  initially  declined.  Bezos  was  playing  "a  little  bit 
of  brinkmanship,"  said  Dillon.  "Jeff  was  absolutely  will- 
ing to  walk  away."  At  the  end  of  the  day,  however,  Doer 
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agreed  to  become  a  director.  Amazon.com  accepted  the 
Kleiner  offer  of  $8  million  in  cash  based  on  a  $60  mil- 
lion valuation,  or  a  little  over  13  percent  ownership  of 
the  company,  which  bought  Kleiner  3,401,376  common 
shares  at  $2.35  a  share. 

"An  $8  million  financing  is  nothing  compared  to 
what  people  are  doing  today  even  in  the  Internet  space," 
said  Alberg.  "It  was  a  remarkably  small  amount."  By 
holding  the  Kleiner  investment  to  13  percent,  Bezos 
limited  the  dilution  of  the  stock  and  maintained  the 
share  value  for  the  original  stockholders.  "It's  similar  to 
the  story  of  Microsoft,"  added  Alberg.  "They  a'lmost 
never  raised  money  [from  outside  investors].  That's  why 
Bill  Gates  owns  such  a  large  percentage  of  the  company. 
That's  why  Jeff  owns  such  a  big  percentage  [initially,  42 
percent  personally,  with  another  10  percent  owned  by 
his  family].  Amazon  has  never  raised  very  much  in  the 


way  of  equity.  Jeff  has  sold  very  little  stock.  He  wasn't 
taking  a  lot  of  cards  off  the  table." 

With  the  infusion  of  Kleiner  capital  in  the  spring  of 
1 996,  Amazon.com  was  thinking  big.  "We  were  going 
to  grow  a  franchise,  and  we  were  going  to  create  an 
enduring,  huge  company  that  was  going  to  be  a  market 
leader,"  said  Dillon.  From  then  on,  "everything  that  we 
were  going  to  do  had  to  support  that.  Now,  we  were 
able  to  think  about  spending  a  million  dollars  on  an 
advertising  program  or  signing  up  to  be  on  Yahoo!. 
There  was  no  stopping  the  company  at  this  point.  We 
were  going  to  do  anything  and  everything  to  dominate 
our  market.  We  never  worried  about  money  again.  The 
sky  was  the  limit.  "■ 

ROBERT  SPECTOR  (ROBERT@ROBERTSPECTOR.COM|  IS  A  SEATTLE-BASED  BUSINESS 
WRITER  AND  AUTHOR  OF  THE  NORDSTROM  WAV  ($15  95,  JOHN  WILEY  &  SONS| 
OR  MORE  EXCERPTS  FROM  AMAZON  COM-  GET  BIG  FAST,  GO  TO  WWW  ROBERT- 
SPECTOR  COM. 
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Cybersleuth 
watching 
software 

companies 

Some  firms  gather 

personal  information 

about  online  users 

Chicago  Tribune 

Richard  M.  Smith  is  a  software  expert 
who  doesn't  fully  trust  his  own  kind.  So 
he  has  launched  a  personal  crusade  to 
expose  technology  practices  that 
threaten  the  privacy  of  millions  of 
Internet  users. 

The  retired  co-founder  of  a  maker  of 
specialized  software  for  industry,  he  has 
a  growing  reputation  as  one  of  the 
Internet's  premier  privacy  defenders.  He 
has  essentially  become  the  Techie 
Avenger  for  millions  of  less  savvy 
Internet  users  who  surf  unaware  of  how 
much  of  their  personal  information  is 
silently  being  gathered. 

Smith  has  unmasked  techniques 
employed  by  some  of  the  Internet's  best 
known  companies  -  including  Microsoft 
Corp.  and  Real  Networks  -  to  invisibly 
retrieve  information  from  Internet 
users'  computers  in  ways  those  firms 
didn't  fully  disclose  until  Smith  raised 
questions. 

He  discovered  that  software  made  by  a 
subsidiary  of  Amazon.com,  Alexa 
Internet,  ostensibly  designed  to~"~neTp 
Internet  shoppers  find  the  best  deals  and 
product  information,  also  secretly 
gathered  personal  information  on  the 
user. 

Smith,  46,  filed  a  complaint  with  the 
Federal  Trade  Commission  after 
discovering  that  Alexa's  zBubbles 
software  harvested  information  about 
his  activities  on-line  and  transmitted  it 
back  to  Alexa. 

Besides  his  e-mail  and  physical 
address,  Alexa's  software  surreptitious- 
ly recorded  his  sister's  phone  number 
when  he  used  his  computer  to  call  her.  It 
noted  his  purchase  of  a  Boston-to-Las 
Vegas  airline  ticket,  the  DVDs  he 
considered  buying  from  an  on-line 
retailer  and  the  information  he  typed  in 
to  confirm  his  teenage  daughter's  flight 
home  from  Philadelphia. 

All  this  was  done  without  notice  to 
him  from  Alexa  that  his  personal  data 
was  being  retrieved,  he  said. 

"It  was  one  of  the  more  intrusive 
pieces  of  software  I've  ever  seen,"  said 
Smith. 

Said  Brewster  Kahle,  Alexa's  chief 
executive:  "Our  users'  privacy  is  of  the 
utmost  importance  to  us,"  but  declined 
further  comment,  citing  the  complaint 
before  the  FTC. 

The  Web  privacy  problem,  Smith  said, 
has  two  fathers. Internet  companies 
olten  are  given  high  stock  values  in  part 
because  of  the  personal  informa  tion  they 
have  on  current  and  prospective 
customers.  So  there  is  great  incentive  for 
thn»i  to  collect  such  data,  he  said.  _ 


1IA-900  MAQAZINE 

SEARCHER:  THE  MAGAZINE  FOR 
DATABASE  PROFESSIONALS 

Sinta  Monies,  CA 
Clre-  3,200 
10  Times/Year 

APRIL  15,  2000 


Bacon's 


Keeping  the         *i*^m 
Web  Garden  Weeded: 


MANAGING         THE 


ELUSIVE 


by  Wallace  Koehler  •  University  of  Oklahoma  •  School  of  Library  and  Information  Studies 


Despite  the  many  efforts  to 
bring  some  kind  of  stability 
to  URL  change  and  demise, 
most  Web  document  authors,  owners, 
or  publishers  have  yet  to  adopt  any  of 
the  innovations  thus  far  advanced  or 
suggested.  These  range  from  the  very 
ambitious  archives  Brewster  Kahle 
[http://www.archive.org)  and  others 
have  suggested  or  Kahle's  Alexa  project 
[http://www.alexa.coml  that  redirects 
the  user  to  the  archived  Web  docu- 
ment in  the  event  of  the  dreaded  "No 
DNS"  or  "404"  error.  OCLC's  PURL  is  a 
URL  redirection  service,  but  it  requires 
that  the 


Web  author  first  registers  the  Web  doc 
ument  and  receives  a  PURL,  then 
maintains  the  integrity  of  the  URL 
PURL  tie  in  the  event  the  URL  h 
moved.  The  search  engine  Google  pro 
vides  cached  documents  (a  "GURL"  if 
you  will)  in  the  event  of  a  retrieval  fail 
ure  of  the  native  document.  Digital  Ob 
ject  Identifiers  (DOIs),  the  system  es 
poused  by  the  new  multi-publishe 
CrossRef  linking  project  of  the  Pub 
lishers  International  Linking  Associa 
tion  (PILA),  may  solve  the  problem  of 
disappearing  e-journal  articles. 

One  thing  is  very  certain.  Web  doc- 
uments don't  last  very  long.  My  own 
research  suggests  half  lives  for  Web 
pages  somewhere  in  the  neighbor- 
hood of  2  years,  with  somewhat 
longer  periods  for  Web  sites. 
Web  pages  change  their  con- 
tent at  a  much  faster  rate. 

Moreover,  different  kinds 
of  Web  pages  change  or  die 
at  different  rates.  For  our 


purposes  here,  we  can  distinguish 
between  two  general  types,  though 
the  literature  identifies  many  more. 
Searchers  use  "navigation"  and  "con- 
tent" pages:  navigation  pages  to  guide 
or  point  us  to  content,  and  content 
pages  for  the  fruit  of  the  search,  the  in- 
formation sought.  Navigation  pages 
last  longer,  but  change  oftener  than 
content  pages. 

Based  on  observation  and  anecdo- 
tal evidence,  those  who  try  to  manage 
Web  documents  treat  dead  links  in 
one  of  five  ways  while  generally  doing 
very  little  to  address  changed  content. 
The  five  models  for  dead  URLmainte- 
nance  are  as  follows: 

1.  Do  nothing. 

2.  Manual  spot  checking  and 
response  to  complaints. 

3.  Periodic  sweep  and  elimination. 

4.  Periodic  sweep  and  transfer. 

5.  Periodic  sweep  and  mark. 
The  "do-nothing"  approach  to  link 

management  is  the  simplest  of  all. 


Keeping  the  Web  Garden  Weeded 


Usually  a  "Web  cataloger"  will  provide 
an  online  list  of  "my-favorite-sites"  and 
then  ignore  them.  Slowly  and  some- 
times not  so  slowly,  the  integrity  of  the 
list  erodes  until  a  substantial  proportion 
of  the  links  to  resources  go  bad.  These 
sites  infuriate  me,  especially  if  they  ad 
dress  a  subject  of  great  interest  or  mo 
merit.  Either  maintain  your  site  or  kill  it 
Manual  spot-checking  and  response 
to  complaints  may  be  effective,  de 
pending  on  the  size  of  the  link  collec 
tion  and  on  its  subject  matter.  Some 
sources  remain  more  stable  than  oth 
ers.  Collections  of  government  docu 
merits  or  sites  created  with  URLstabil 
ily  in  mind  may  be  good  candidates  for 
minimalist  supervision.  One  major  site 
that  "collects"  professional  organiza 
tion  sites,  hosted  at  the  University  of 
Waterloo,  has  a  preference  for  canoni- 
cal sites  (those  that  reflect  an  organiza- 
tion name  in  the  domain  name  —  e.g., 
www.  myorg.org, 


as  against  www.myuniv.edu/-myorg). 
They  find  that  canonical  URLs  have 
more  lasting  power  than  the  others. 
The  University  of  Waterloo  Profes- 
sional Societies  project's  URL  check- 
ing, more  sophisticated  than  the  spot- 
check  alone,  might  suffice  in  their  case. 

I  hose  who  sweep  their  collections, 
then  eliminate  busted  links,  maintain 
fairly  clean  sites.  However,  they  will 
commit  the  "babies  and  bath  water"  er- 
ror. Not  only  do  URLs  die,  they  come 
back;  I  prefer  lo  call  such  resurrected 
URLs  not  "dead,"  but  comatose.  A!  any 
given  time,  about  5  percent  of  the  Web 
is  comatose  but  on  the  mend.  If  you 
eliminate  dead  links,  you  will  eliminate 
links  that  are  not  really  gone.  Like  every- 
thing else,  there  is  a  pattern  to  this.  The 
"No  DNS"  error  may  very  well  only  in- 
dicate that  the  network  is  overwhelmed 
or  that  the  target  server  is  down  for  one 
reason  or  another.  Neither  of  these  is 
permanent.  The  "No  404"  tends  to  por- 
tend the  end,  but  even  that  is  not  cer- 
tain. The  "No  404"  error  is  more  serious 
lor  content  pages  than  navigation 

pages.  Even  with  a  "No  404"  error, 
the  server  remains  in  place  and 
you  may  still  find  the  absent 
page  with  a  little  digging. 


Two  Web  link  maintenance  strate- 
gies I  positively  endorse.  The  first  is  to 
sweep  the  sites,  then  transfer  busted 
URLs  to  a  separate  file,  perhaps  online, 
perhaps  not.  Keep  checking  the  busted 
URLs  to  see  if  they  have  returned.  When 
they  come  live  again,  restore  them  to 
the  online  public  resource.  Based  on 
conversations  I  have  had  with  Web- 
masters of  major  Web  library  catalog 
sites  here  in  the  United  States  and  in 
Europe,  this  is  a  common  strategy. 

The  strategy  I  most  prefer,  and  the 
one  I  have  taken  with  my  own  Web  site 
devoted  to  ethical  issues  affecting  library 
and  information  managers  [http://www. 
ou.cdu/cas/ si  is/ethics/  Ethics  Rib 
Org.html,  is  to  mark  die  busted  sites  but 
to  leave  them  as  part  of  the  collection. 
This  obviates  the  need  to  re-add  them 
when  they  return.  But  it  also  serves  the 
user  because  it  shows  diat  a  Web  re- 
source once  existed  and  may  again  exist 
for  a  given  organization.  Moreover,  it 
demonstrates  the  existence  of  an  orga- 
nization, and  indeed  organizations  can 
persist  even  without  a  Web  presence. 

Hunting  the  Busted  Link 

There  are  any  number  of 
ways  to  screen  for  busted 
links.  The  most  obvious  and 
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Keeping  the  Web  Garden  Weeded 


most  time  consuming  is  to  "click  and 
check."  For  a  site  with  hundreds  of 
links,  like  mine,  that's  a  major  chore. 
There  are  also  many  software  solu- 
tions to  the  problem.  That  old  progen- 
itor browser,  Mosaic,  supported  URL 
checking  through  its  bookmark  file. 
Browser  power  disappeared  for  a 
while,  but  has  since  returned.  One  can 
use  a  variety  of  software  tools  designed 
to  check  URL  efficacy. 

Don't  take  the  following  as  an  en- 
dorsement, just  a  list  of  what  I  use.  I  per- 
sonally like  PowerMarks  from  Kaylon 
Technologies  ($24.95;  http://www.kay 
lon.com]  for  screening  a  set  of  URLs.  The 
program  lets  you  add  or  delete  URLs  eas- 
ily; its  reports  are  intuitively  clear;  you 
can  set  it  up  to  run  automatically;  and  it 
doesn't  cost  much.  But  it's  not  only  pack- 
age that  does  just  mat.  For  more  sophis- 
ticated applications,  I  prefer  to  use  two 
software  packages  from  InContext  Sys- 
tems —  WebAnalyzer2  for  site  mainte- 
nance [$419.95  Canadian]  and  FlashSite 
1 .02,  a  URL  "checker"  with  a  wide  array 
of  features  |$54.95  Canadian]. 


The  Busted  Link 
Is  Harder  to  Catch 
Than  Once  It  Was 

Once  upon  a  time,  identify 
ing  the  404  and  DNS  errors 


was  easier  than  it  is  today.  Remember 
when  that  was  all  the  error  message 
said:  "No  DNS"  or  "404  Error."  It's  not 
like  that  today.  We  are  no  longer  told 
that  the  page  has  gone  404;  sometimes 
we  get  a  cute  little  message  instead.  Or 
we  are  told  to  check  with  the  site  ad- 
ministrator. Because  these  messages 
do  not  necessarily  follow  any  given 
format  and  because  they  tend  to  be 
long,  one  can  mistake  them  for  Web 
pages  with  "real"  content. 

For  the   moment,  I  manage  the 
problem  in  one  of  three  ways: 

•  Using  FlashSite,  we  look  for  Web 
pages  that  report  a  constant  size, 
measured  in  bytes. 

•  Using  FlashSite  or  other  software, 
we  look  for  sites  not  updated  for  a 
protracted  period  of  time. 

•  About  every  6  months,  we  examine 
every  link  on  our  site.  Pages  that  do 
not  change  size  or  are  not  updated 
may  be  404-ed.  We  have  begun 
testing  oftener  than  6  months  as 
time  allows. 


Duty  Calls 

As  many  Searcher  readers  already 
know,  there  are  opportunities  "out 
there"  to  do  quality  site  information 
management  for  hire.  If  you're  a  Web- 
master without  the  time  or  resources 
to  maintain  your  site,  then  hire  it  out. 
If  you're  a  talented  information  pro- 
fessional looking  for  work,  help  main- 
tain the  sites  of  others. 

Everyone  who  creates  and  main- 
tains a  Web  resource  site  has,  I  believe, 
an  ethical  obligation  to  maintain  the 
integrity  of  the  site.  This  is  particularly 
true  of  those  of  us  in  the  information 
professions:  librarians,  information 
brokers,  information  scientists,  and 
others.  Site  maintenance  is  time  con- 
suming and  expensive,  but  it  must  be 
done.  If  you  don't,  only  two  alterna- 
tives remain:  Antagonize  your  users  or 
take  the  site  down.  * 
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INTERNET 


P I       : 
As  companies 
stealthily  peer  into 
your  personal 
information,  one  • 
man  is  putting 
them  under  a 
magnifying  glass. 


After  turning  his  attention  to  Internet  privacy  a  year  ago,  Richard  M.  Smith,  a 
retired  software  designer,  discovered  that  a  subsidiary  of  Amazon.com  secretly 
recorded  his  e-mail  and  physical  address,  sister's  phone  number  and  purchases. 


Software  expert  Richard  M.  Smith 
doesn't  fully  trust  his  own  kind.  So 
he  has  launched  a  personal  cru- 
sade to  expose  technology  prac- 
tices that  threaten  the  privacy  of  millions  of 
Internet  users' 

The  retired  software  designer  has  be- 
come one  of  the  Internet's  premier  privacy 
defenders. 

Smith  has  unmasked  techniques  em- 
ployed by  some  of  the  Internet's  best-known 
companies  —  including  Microsoft  Corp. 
and  Real  Networks  —  to  invisibly  retrieve 
information  from  Internet  users'  computers 
in  ways  those  firms  didn't  fully  disclose  un- 
til Smith  raised  questions. 

He  discovered  that  software  made  by  a 
subsidiary  of  Amazon.com,  Alexa  Internet, 
which  helps  Internet  shoppers  find  the  best 
deals  and  product  information,  also  secretly 
gathered  personal  information  on  the  user. 

Smith,  46,  filed  a  complaint  with  the  Fed- 
eral Trade  Commission  after  discovering 
that  Alexa's  zBubbles  software  harvested  in- 
formation about  his  activities  online  and 
transmitted  it  to  Alexa. 

Besides  his  e-mail  and  physical  address, 
Alexa's  software  surreptitiously  recorded 
his  sister's  phone  number  when  he  used  his 
computer  to  call  her.  It  noted  his  purchase 
of  a  Boston-to-Las  Vegas  airline  ticket,  the 
DVDs  he  considered  buying  from  an  online 
retailer  and  what  he  typed  to  confirm  his 
teenage  daughter's  flight  home  from  Phila- 
delphia. 

All  this  was  done  without  notice  to  him 
from  Alexa  that  his  personal  data  was  being 
retrieved. 

"It  was  one  of  the  more  intrusive  pieces 
of  software  I've  ever  seen,"  said  Smith. 

Said  Brewster  Kahle,  Alexa's  chief  execu- 


tive: "Our  users'  privacy  is  of  the  utmost  im- 
portance." But  he  declined  further  com- 
ment, citing  the  complaint  before  the  FTC.  j 

SMITH'S  MISSION  is  simple. 

"I  want  to  show  how  much  monitoring  is  - 
being  done  so  we  can  make  good  decisions* 
about  whether  we  want  this  or  not,"  Smith  ~ 
said  from  his  Boston  home.  "If  we  talk  to    • 
marketing  folks  who  are  involved,  they  say: 
'Oh,  there's  no  problem  here.  It's  all  for 
your  own  good.  And  don't  ask  too  many 
questions.'  What  1  like  to  do  is  ask  all  the 
questions,"  he  said. 

The  Web  privacy  problem,  Smith  said, 
has  two  fathers.  Internet  companies  have 
been  given  high  stock  values  partly  because 
of  the  personal  information  they  have  on     - 
customers.  So  there  is  great  incentive  for    " 
them  to  collect  such  data,  he  said. 

The  other  is  that  software  engineers  by  [ 
nature  like  to  do  their  own  thing.  "The  last « 
thing  in  the  world  they  want  to  be  told  is  • 
what  to  do,"  Smith  said.  t 

He  foresees  legislators'  passing  laws  that; 
tell  software  companies  what  kind  of  infor-  •_ 
mation  they  can  and  can't  "transmit  up  and  - 
down  the  wire,"  without  the  users'  informed 
consent,  as  well  as  ethical  training  for  soft- * 
ware  developers,  he  said. 

Smith,  who  sits  on  the  FTC's  Advisory  - 
Committee  on  Online  Access  and  Security,  * 
started  thinking  about  Internet  security  ; 
years  ago  when  he  ran  Phar  Lap  Software  in 
Cambridge,  Mass.  i 

He  focused  mainly  on  software  bugs  that" 
left  computers  vulnerable  to  hackers  and  vi; 
ruses.  It  was  Smith  who  last  year  uncovered 
the  name  of  the  Melissa  e-mail  virus'  ere-  - 
ator,  David  L.  Smith,  and  passed  it  along  to! 
authorities. 

A  year  ago,  he  turned  his  attention  to  In-;; 

See  EYE,  Page  7   * 
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ternet  privacy  after  Intel's  plan  for 
a  serial  number  in  its  Pentium  III 
processors  was  revealed.  Theoreti- 
cally, it's  possible  millions  of  com- 
puters could  be  traced  over  the  In- 
ternet That  made  him  wonder 
what  other  tracking  was  already 
occurring. 

HE  FOUND  THAT  Microsoft 
Word,  the  nation's  most  popular 
word-processor  program,  embed- 
ded a  hidden  electronic  identifier 
unique  to  each  computer  on  Word 
documents.  That  globally  unique 
identifier,  as  it  is  called,  was  sent 
back  to  Microsoft  when  consumers 
registered  their  Microsoft  soft- 


Thus,  the  personal  information 
people  provided  upon  registration 
could  theoretically  be  linked  to  a 
particular  document  using  Word. 


"I  said,  'Holy  cow,  this  is  bad,' " 
Smith  recalled.  "Not  that  anybody 
was  using  all  this  stuff,  but  this  in- 
teresting little  surveillance  system 
was  all  in  place"  if  ever  someone 
wanted  to  use  it. 

Smith  contacted  Microsoft  The 
Redmond,  Wash.-based  software 
giant  "right  off  the  bat  realized  this 
was  not  a  good  situation,"  Smith 
said.  The  company  stopped  new 
versions  of  its  software  from 
stamping  documents  with  the 
unique  numbers. 

Carol  Sacks,  a  Microsoft  spokes- 
woman, said,  "The  fact  is,  Richard 
is  a  technical  expert,  and  we  re- 
spect what  he  does.  We  believe 
[his  efforts]  are  intended  to  help 
strengthen  consumers'  privacy 
protection,  and  this  is  an  important 
issue  to  all  of  us." 

In  October,  Smith  found  soft- 
ware by  Real  Networks  of  Seattle 


doing  something  similar.  Real  Net- 
works' software  compresses  and 
decompresses  sound  and  video 
files  for  Internet  transmission. 

Smith  found  that  when  he  put  a 
compact  disc  in  his  computer,  Real 
Jukebox  software  automatically 
transmitted  his  machine's  unique 
identifier  and  his  musical  selec- 
tions to  Real  Networks. 

Since  Real  Networks  had  his 
name  and  other  personal  informa- 
tion from  his  registration,  "it  put 
them  in  a  position  of  being  able  to 
build  a  database  of  what  CDs  I  was 
listening  to,"  Smith  said.  He 
alerted  the  media  and  a  contro- 
versy ensued.  In  response,  Real 
Network  disabled  the  technology. 

The  company  didn't  challenge 
Smith's  facts,  just  his  conclusions. 
"He  seemed  to  assume ...  Real  Net- 
works was  monitoring,  and  that 
wasn't  the  case,"  said  Allen  Mayer 
of  Real  Networks. 

// 
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Continued  from  Page  1E 
all  the  questions,"  he  said. 

The  World  Wide  Web  privacy 
problem,  Smith  said,  has  two  la- 
thers. Internet  companies  often 
are  given  high  stock  values  in  part 
because  of  the  personal  informa- 
tion they  have  on  current  and  pro- 
spective customers.  So  there  is 
great  incentive  for  them  to  collect 
such  data,  he  said. 

The  other  is  that  software  engi- 


neers by  nature  like  to  do  their 
own  thing.  Software  writers  "sort 
of  create  their  own  little  world 
with  software.  They  write  the 
rules.  The  last  thing  in  the  world 
they  want  to  be  told  is  what  to  do," 
Smith  said. 

He  foresees  legislators  eventu- 
ally passing  laws  that  tell  software 
companies  what  kind  of  informa- 
tion they  can  and  can't  "transmit 
up  and  down  the  wire,"  without 
the  users'  informed  consent,  as 
well  as  ethical  training  for  soft- 
ware developers,  he  said. 

Smith,  who  sits  on  the  Federal 
Trade      Commission's      Advisorv 


Committee  on  On-line  Access  and 
Security,  started  thinking  about 
Internet  security  years  ago  when 
he  ran  Phar  Lap  Software  Inc.,  a 
Cambridge.  Mass.,  firm  named  for 
a  famous  Australian  racehorse. 

He  focused  mainly  on  software 
bugs  that  left  computers  vulner- 
able to  hackers  and  viruses.  It  was 
Smith  who  last  year  uncovered 
the  name  of  the  Melissa  e-mail 
virus'  creator,  David  L.  Smith,  and 
passed  it  along  to  authorities. 

A  year  ago,  he  turned  his  atten- 
tion to  Internet  privacy.  The  con- 
troversy over  Intel  Corp.'s  plan  for 
a  serial  number  in  its  Pentium  III 
microchip  processors  that,  theore- 
tically, would  make  possible  trac- 
ing millions  of  computers  over  the 
Internet,  made  him  wonder  what 
other  tracking  might  already  be 
occurring. 

He  found  that  Microsoft  Word, 
the  nation's  most  popular  word 
processor  program,  embedded  a 
hidden  electronic  identifier, 
unique  to  each  computer,  on 
Word  documents.  ^ 
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That  globally  unique  identifier, 
as  it  is  called,  was  sent  back  to  Mi- 
crosoft when  consumers  regis- 
tered their  Microsoft  software. 
Smith  learned. 

Thus,  the  personal  information 
people  provided  upon  registration 
could  theoretically  be  linked  to  a 
particular  document  written  in 
Word. 

"I  said,  'Holy  cow,  this  is 
bad.'  "  Smith  recalled.  "Not  that 
anybody  was  using  all  this  stuff, 
but  this  interesting  little  surveil- 
lance system  was  all  in  place"  if 
ever  someone  wanted  to  use  it. 

Smith  contacted  Microsoft.  The 
Redmond,  Wash-based  software 
giant  "right  off  the  bat  realized 
this  was  not  a  good  situation."' 
Smith  said.  The  company  stopped 
new  versions  of  its  software  from 
stamping  documents  with  the 
unique  numbers. 

Carol  Sacks,  a  Microsoft 
spokeswoman,  said,  "The  fact  is, 
Richard  is  a  technical  expert,  and 
we  respect  what  he  does.  We  be- 
lieve (his  efforts)  are  intended  to 
help  strengthen  consumers'  pri- 
vacy protection,  and  this  is  an  im- 
portant issue  to  all  of  us."  /  / 
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'Techie  Avenger'  intends  to  expose 
companies  that  spy  on  Net  users 


By  Frank  James 

(him^o  tribune 

HROOKLINC,  Mass.  —  Richard 
M.  Sinilli  is  a  software  ex|>ert  wlio 
doesn't  fully  trust  his  own  kind.  So 
lie  has  launched  a  personal  cru- 
sade to  expose  technology  prac- 
tices that  llireaten  the  privacy  of 
millions  of  Internet  users. 

Ihe  retired  co-rounder  of  a 
maker  of  specialized  software  for 
industry,  he  has  a  growing  reputa- 
tion as  one  of  the  Internet's  pre- 
mier privacy  defenders.  He  has 
essentially  hecome  the  Tcchie 
Avenger  for  millions  of  less  savvy 
Internet  users  who  surf  unaware  of 
how  much  of  their  personal  infor- 

I mation  is  silently  heing  gathered. 
|  Smith  has  unmasked  techniques 
employed  by  some  of  the  Internet's 
best-known  companies  —  includ- 
ing Microsoft  Corp.  and  Real  Ncl- 


"/  want  to  show  how 
much  monitoring  is 
being  done  so  we  can 
make  good  decisions 
about  whether  we 
want  this  or  not." 

—  Richard  M.  Smith, 

software  expert/privacy  crusader 


works  —  to  retrieve  information 
invisibly  from  Internet  users'  com- 
puters in  ways  those  companies 
didn't  disclose  fully  until  Smith 
raised  questions. 

He  discovered  that  software 
made  by  an  Amazon.com  sub- 
sidiary, Alexa  Jnisxnet,  ostensibly 
designed  to  help  Internet  shoppers 


find  Ihe  best  deals  and  product 
information,  also  secretly  gathered 
personal  information  on  the  user. 

Smith,  46,  filed  a  complaint  with 
the  Federal  Trade  Commission 
after  discovering  that  Alexa's 
zBubbles  software  harvested  infor- 
mation about  his  activities  online 
and  transmitted  it  back  to  Alexa. 

besides  [lis  e-mail  and  physical 
addresses,  Alexa's  software  surrepti- 
tiously recorded  bis  sister's  phone 
number  when  he  used  his  com- 
puter to  call  her.  It  noted  liis  pur- 
chase of  a  Boston-io-Las  Vegas 
airline  ticket,  the  DVDs  he  consid- 
ered buying  from  an  online  retail- 
er and  the  information  be  typed  In 
to  confirm  Iris  teenage  daughter's 
llight  home  from  Philadelphia. 

All  this  was  done  without  notice 
to  him  from  Alexa  dial  his  per- 

Please  see  SPY,  C7 


CYBERSLEUTH: 

Interne!  security 
specialist 
Richard  M.  Smith 
peers  through  a 
magnifying  glass 
at  his  home 
office  in 

Brooklme,  Mass. 
Smith  is  a 
software  expert 
who  has  a 
growing 

reputation  as  one 
of  the  Internet's 
premier  privacy 
defenders  He 
intends  to 
expose 
technology 
practices  that 
threaten  the 
privacy  of 
Internet  users 


SPY 


Continued  from  C8 

soii.il  data  was  being  retrieved,  he 
said. 

"It  was  one  of-  the  more-intrusive 
pieces  of  software  I've  ever  seen," 
Smith  said. 

Said  Brewster  Kahle,  Alexa's  chief 
executive:  "Our  users'  privacy  is  of 
the  utmost  importance  to  us,"  but 
he  declined  further  comment,  cit- 
ing die  complaint  before  the  FTC. 

Interviewed  in  the  rambling 
frame  house  he  shares  with  his 
Russian-born  wife,  teenage  daugh- 
ter and  standard  poodle  in  this 
Boston  suburb,  Smith  said  his  mis- 
sion is  a  simple  one. 

T  want  to  show  how  much  mon- 
itoring is  being  done  so  we  can 
make  good  decisions  about  whether 
we  want  this  or  not,"  Smith  said  in 
die  attic  room  where  he  does  most 
of  his  detective  work.  "If  we  talk  to 
marketing  folks  who  are  involved, 
they  say:  'Oh,  diere's  no  problem 
here.  It's  all  for  your  own  good.  And 
don't  ask  too  many  questions.'  What 
I  like  to  do  is  ask  all  the  questions," 
he  said. 

The  Web  privacy  problem,  Smith 
said,  has  two  fadicrs.  Internet  com- 
panies often  are  given  liigh  stock 
values  in  part  because  of  die  per- 
sonal information  they  have  on 
current  and  prospective  customers. 
So  there  is  great  incentive  for  diem 
to  collect  such  data,  he  said.  ' 

The  otiier  is  that  software  engi- 
neers by  nature  like  to  do  their 
own  tiling.  Software  writers  "sort  of 
create  their  own  little  world  with 
software.  They  write  the  rules.  The 
last  tiling  in  the  world  they  want 
to  be  told  is  what  to  do,"  Smith 
said. 

He  foresees  legislators'  eventually 
passing  laws  that  tell  software  com- 
panies what  kind  of  information 
they  can  and  can't  "transmit  up  and 
down  the  wire,"  witiiout  die  users' 
informed  consent,  as  well  as  ethical 
training  for  software  developers. 

Smith,  who,  sits  on  die  Federal 
Trade  Commission's  Advisory 
Committee  on  On-line  Access  and 
Security,  started  thinking  about 
Internet  security  years  ago  when  he 
ran  Phar  Lap  Software  Inc.,  a 
Cambridge,  Mass.,  company  named 
for  a  famous  Austialian  racehorse. 


Software  writers  "sort 
of  create  their  own 
little  world  with 
software.  They  write 
the  rules.  The  last 
thing  in  the  world  they 
want  to  he  told  is  what 
to  dor 

—  Richard  M.  Smith, 

software  expert 

He  focused  mainly  on  software 
bugs  that  left  computers  vulnerable 
to  hackers  and  viruses.  It  was 
Smith  who  last  year  uncovered  the  ' 
name  of  the  Melissa  e-mail  virus' 
creator  and  passed  it  along  to 
audiorities. 

A  year  ago,  he  turned  his  atten- 
tion to  Internet  privacy.  The  con- 
troversy over  Intel  Corps  plan  for  a 
serial  number  in  its  Pentium  III 
microchip  processors  that,  Uieoreti- 
cally,  would  make  possible  tracing 
millions  of  computers  over  the 
Internet,  made  him  wonder  what 
other  tracking  might  already  be 
occurring. 

He  found  that  Microsoft  Word, 
the  nation's  most  popular  word- 
processing  program,  embedded  a 
hidden  electronic  identifier,  unique 
to  each  computer,  on  Word  docu- 
ments. That  globally  unique  identi- 
fier, as  it  is  called,  was  sent  back  to 
Microsoft  when  consumers  regis- 
tered their  Microsoft  software, 
Smith  learned.  Thus,  die  personal 
information  people  provided  upon 
registration  could  theoretically  be 
linked  to  a  particular  document 
written  in  Won!. 

"I  said,  'Holy  cow,  tiiis  is  bad,'  " 
Smith  recalled.  "Not  that  anybody 
was  using  all  tiiis  stuff,  but  this 
interesting  little  surveillance  system 
was  all  in  place"  if  ever  someone 
wanted  to  use  it. 

Smidi  contacted  Microsoft.  The 
Redmond,  Wash. -based  software 
giant  "right  off  die  bat  realized  tiiis 
was  not  a  good  situation,"  Smith 
said.  The  company  stopped  new 
versions  of  its  software  from  stamp- 
ing documents  with  the  unique 


numbers. 
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New  Media  look 
a  lot  like  Old  Media 


BY  DAVID  PLOTNIKOFF 
Knight  Ridder  News  Service 

The  Net  has  certainly 
changed  my  life  -  and  mil- 
lions of  others  -  immeasur- 
ably for  the  better.  But  it's  be- 
coming increasingly  clear  that 
the  Internet  has  not  rewritten 
the  rules  of  mass  media. 

Consider  two  rather  arresting 
statistics  from  Alexa  Internet,  a 
San  Francisco-based  division  of 
mighty  Amazon.com.  The  com- 
pany's primary  product  is  a  free 
service  that  furnishes  supple- 
mentary hypertext  links  and 
other  related  information  to 
Web  surfers.  To  do  the  job, 
Alexa's  robots  attempt  to 
"crawl"  the  entirety  of  the  Web 
every  two  months.  The  most  re- 
cent of  these  surveys  counted 
3.9  million  Web  host  machines. 
(This  is  not,  strictly  speaking,  to 
be  equated  with  the  total  num- 
ber of  sites  on  the  Web,  since 
several  host  machines  may  con- 
stitute a  single  Web  site.) 

Alexa  also  looks  at  Web  traf- 
fic. By  examining  usage  pat- 
terns among  its  users  -  500,000 
people  in  109  countries  -  the 
company  can  draw  a  pretty  good 
bead  on  who's  going  where. 
What  the  company  found  re- 
cently may  come  as  something 
of  a  shock:  Eighty  percent  of  all 
Web  traffic  is  going  to  one  half 
of  1  percent  of  all  sites. 

Up  until  now,  I  have  believed 
without  question  that  the  Net, 
by  its  very  structure,  would  nat- 


urally be  a  force  for  cultural  di- 
versity. This  is,  after  all,  a 
molten  new  medium  unencum- 
bered by  regulations  or  signifi- 
cant barriers  to  entry.  Theoreti- 
cally, anyone  with  a  $500  com- 
puter and  a  freebie  Web  site  can 
ignite  a  scandal  that  rocks  a 
presidential  administration. 

In  the  half-dozen  years  since 
the  Web  achieved  critical  mass, 
there  has  been  a  renaissance  of 
homegrown  content,  a  flood  of 
creativity  from  millions  of  citi- 
zen pamphleteers.  But  our  col- 
lective attention  is  elsewhere.  If 
Alexa  is  to  be  believed,  the  Web 
has  not  brought  about  the  atom- 
ization  of  culture  at  all.  The 
names  may  be  different,  but  the 
power  structure  is  little  changed 
from  the  Old  Media  world:  Very 
large  audiences  concentrated  by 
a  handful  of  very  large  omnibus 
brands.  The  old  one-to-many 
broadcast  model  appears  to  be 
alive  in  this  medium  designed 
for  many-to-many  peer  commu- 
nication. 

Analysts  given  to  glib  pro- 
nouncements would  explain  this 
as  being  the  natural  result  of 
the  so-called  "network  effect." 
Once  networks  (in  this  case, 
large  sites  with  a  great  deal  of 
traffic)  achieve  a  critical  mass, 
they  generate  their  own  growth 
because  people  naturally  want 
to  go  where  other  people  al- 
ready congregate.  In  other 
words,  after  a  certain  point,  the 
big  just  naturally  get  bigger. 

According  to  Alexa,  only  a 


very  elite  group  of  monster 
brands  enjoy  truly  global  suc- 
cess. When  the  company  recently 
tallied  the  most  popular  sites  in 
each  of  15  overseas  markets  plus 
the  United  States,  just  three 
sites  showed  up  on  all  the  lists: 
Yahoo,  MSN  and  Microsoft.com 
(the  latter  two,  both  Microsoft 
properties,  were  counted  as  sep- 
arate sites  by  Alexa).  Lycos  was 
tallied  in  15  of  the  16  countries. 
Excite,  Geocities  and  Xoom  (a 
portal  run  by  NBC  Internet)  ap- 
peared in  13  of  16  lists. 

Looking  just  at  non-U.S.  Inter- 
net traffic  in  February,  Alexa's 
top  10  Web  destinations  world- 
wide were,  in  descending  order: 
MSN,  Yahoo,  yahoo.co.jp  (Yahoo 
Japan),  Microsoft.com,  Alta 
Vista,  Geocities,  Excite,  pornci- 
ty.net,  Lycos  and,  finally,  Kimo  (a 
Taiwanese  search  engine). 

Even  assuming  that  there's  a 
vast  and  multifaceted  world 
within  each  of  these  individual 
properties  (Yahoo's  communi- 
ties being  as  diverse  as  the  Net 
itself),  there's  something  funda- 
mentally unbalanced  about  a 
hit  parade  that  is  80  percent 
American.  According  to  Alexa, 
nearly  two-thirds  of  the  global 
top  1,000  sites  are  U.S.  proper- 
ties. Although  Americans  are  a 
minority  on  the  Net  now  and 
will  continue  to  see  their  rela- 
tive numbers  diminish,  the 
World  Wide  Web  of  2000  looks 
an  awfully  lot  like  America's 
Web.  So  much  for  striking  an  in- 
tellectual balance-of -trade 
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New  Media  look 
a  lot  like  Old  Media 


BY  DAVID  PLOTNIKOFF 
Knight  Ridder  News  Service 

The  Net  has  certainly 
changed  my  lif  e  -  and  mil- 
lions of  others  -  immeasur- 
ably for  the  better.  But  it's  be- 
coming increasingly  clear  that 
the  Internet  has  not  rewritten 
the  rules  of  mass  media. 

Consider  two  rather  arresting 
statistics  from  Alexa  Internet,  a 
San  Francisco-based  division  of 
mighty  Amazon.com.  The  com- 
pany's primary  product  is  a  free 
service  that  furnishes  supple- 
mentary hypertext  links  and 
other  related  information  to 
Web  surfers.  To  do  the  job, 
Alexa's  robots  attempt  to 
"crawl"  the  entirety  of  the  Web 
every  two  months.  The  most  re- 
cent of  these  surveys  counted 
3.9  million  Web  host  machines. 
(This  is  not,  strictly  speaking,  to 
be  equated  with  the  total  num- 
ber of  sites  on  the  Web,  since 
several  host  machines  may  con- 
stitute a  single  Web  site.) 

Alexa  also  looks  at  Web  traf- 
fic. By  examining  usage  pat- 
terns among  its  users  -  500,000 
people  in  109  countries  -  the 
company  can  draw  a  pretty  good 
bead  on  who's  going  where. 
What  the  company  found  re- 
cently may  come  as  something 
of  a  shock:  Eighty  percent  of  all 
Web  traffic  is  going  to  one  half 
of  1  percent  of  all  sites. 

Up  until  now,  I  have  believed 
without  question  that  the  Net, 
by  its  very  structure,  would  nat- 


urally be  a  force  for  cultural  di- 
versity. This  is,  after  all,  a 
molten  new  medium  unencum- 
bered by  regulations  or  signifi- 
cant barriers  to  entry.  Theoreti- 
cally, anyone  with  a  $500  com- 
puter and  a  freebie  Web  site  can 
ignite  a  scandal  that  rocks  a 
presidential  administration. 

In  the  half-dozen  years  since 
the  Web  achieved  critical  mass, 
there  has  been  a  renaissance  of 
homegrown  content,  a  flood  of 
creativity  from  millions  of  citi- 
zen pamphleteers.  But  our  col- 
lective attention  is  elsewhere.  If 
Alexa  is  to  be  believed,  the  Web 
has  not  brought  about  the  atom- 
ization  of  culture  at  all.  The 
names  may  be  different,  but  the 
power  structure  is  little  changed 
from  the  Old  Media  world:  Very 
large  audiences  concentrated  by 
a  handful  of  very  large  omnibus 
brands.  The  old  one-to-many 
broadcast  model  appears  to  be 
alive  in  this  medium  designed 
for  many-to-many  peer  commu- 
nication. 

Analysts  given  to  glib  pro- 
nouncements would  explain  this 
as  being  the  natural  result  of 
the  so-called  "network  effect." 
Once  networks  (in  this  case, 
large  sites  with  a  great  deal  of 
traffic)  achieve  a  critical  mass, 
they  generate  their  own  growth 
because  people  naturally  want 
to  go  where  other  people  al- 
ready congregate.  In  other 
words,  after  a  certain  point,  the 
big  just  naturally  get  bigger. 

According  to  Alexa,  only  a 


very  elite  group  of  monster 
brands  enjoy  truly  global  suc- 
cess. When  the  company  recently 
tallied  the  most  popular  sites  in 
each  of  15  overseas  markets  plus 
the  United  States,  just  three 
sites  showed  up  on  all  the  lists: 
Yahoo,  MSN  and  Microsoft.com 
(the  latterfwo,'both  Microsoft 
properties,  were  counted  as  sep- 
arate sites  by  Alexa).  Lycos  was 
tallied  in  15  of  the  16  countries. 
Excite,  Geocities  and  Xoom.(a 
portal  run  by  NBC  Internet  j  ap- 
peared in  13  of  16  lists. 

Looking  just  at  non-U.S.  Inter- 
net traffic  in  February,  Alexa's 
top  10  Web  destinations  world- 
wide were,  in  descending  order: 
MSN,  Yahoo,  yahoo.co.jp  (Yahoo 
Japan),  Microsoft.com,  AJta 
Yista,  Geocities,  Excite,  pornci- 
ty.net,  Lycos  and,  finally,  Kimo  (a 
Taiwanese  search  engine). 

Even  assuming  that  there's  a 
vast  and  multifaceted  world 
within  each  of  these  individual 
properties  (Yahoo's  communi- 
ties being  as  diverse  as  the  Net 
itself),  there's  something  funda- 
mentally unbalanced  about  a 
hit  parade  that  is  80  percent 
American.  According  to  Alexa, 
nearly  two-thirds  of  the  global 
top  1,000  sites  are  U.S.  proper- 
ties. Although  Americans  are  a 
minority  on  the  Net  now  and 
will  continue  to  see  their  rela- 
tive numbers  diminish,  the 
World  Wide  Web  of  2000  looks 
an  awfully  lot  like  America's 
Web.  So  much  for  striking  an  in- 
tellectual balance-of-trade. 
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BALLMER  DISCUSSES  SUIT  STATUS 

Microsoft  CEO  Steve  Ballmer  last  week  told 
thousands  of  employees  in  an  E-mail  that  Mi- 
crosoft continues  to  submit  last-minute 
proposals  for  settlement  of  its  antitrust  case. 

Ballmer  dismissed  many  media  reports  as 
"largely  inaccurate."  He  said  the  case  has  not 
been  settled,  and  the  Justice  Department  has 
not  viewed  the  proposals  as  "inadequate." 

"We  are  still  in  talks  with  the  government  in 
an  effort  to  resolve  the  case,"  Ballmer  said  in 
the  message.  "While  we're  very  sure  of  our  le- 
gal position,  and  we're  prepared  to  take  it  ail  the 
way  on  appeal,  we've  learned  that  discretion  is 
the  better  part  of  valor,  so  we  are  working  to 
resolve  the  case  through  settlement" 


Microsoft  reportedly  has  offered  a  number 
of  settlement  options,  ranging  from  opening 
the  Windows  application  programming  in- 
terfaces to  detaching  the  Internet  Explorer 
browser  from  the  Windows  operating  system. 

Earlier  this  week,  Judge  Thomas  Penfield 
Jackson  reportedly  told  both  sides  in  the 
antitrust  case  that  he  would  delay  issuing  his 
verdict — possibly  until  the  end  of  next 
week — to  give  the  parties  more  time  to  reach  a 
settlement  If  the  sides  were  to  settle,  Jackson 
said  he  would  not  rule  in  the  case. 

FTC  INVESTIGATES  WEB  SITES 

The  Federal  Trade  Commission  continues  to 
probe  Internet  companies  on  their  privacy 
practices,  and  last  week  Yahoo  said  it  has  been 
contacted  by  the  FTC,  which  is  looking  into  the 


company's  data-collection  practices. 

Recent  high-profile  breaches  of  consum- 
ers' privacy  have  raised  public  concern  about 
data-gathering  tactics  on  the  Web.  DoubleClick 
faces  a  half-dozen  lawsuits  from  consumers 
and  informal  inquiries  by  the  FTC,  and  Ama- 
zon.com disclosed  recently  that  the  company 
and  its  Alexa  Internet  software  subsidiary  face 
two  privacy-invasion  lawsuits  as  well  as  an 
FTC  inquiry  concerning  data  privacy. 

Yahoo  says  it  is  cooperating  with  the  FTC. 
"We're  voluntarily  providing  information  to  the 
FTC.  We  take  privacy  very  seriously,  we  are 
committed  to  it,  and  we  are  proud  of  our 
record,"  a  spokeswoman  says. 

Auction  site  eBay  Inc.,  meanwhile,  says  it 
is  the  subject  of  three  local  and  federal  probes 
into  practices  in  the  online  auction  industry. 
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i  (he  early  '90s,  as  a  freshly  mint- 


I  held  vaguely  Utopian  It 
things  were  supposed  to  be  once  every 
sentient  being  on  the  planet  got 
plugged  in.  We  would  ail  be  happy 
shoppers  in  a  gjoba]  marketplace  of 


those  early  expectations  It's 
my  life  —  and  millions  of  others  —  im- 
measurably for  the  better  But  it's  be- 
coming increasingly  clear  that  the  In- 
ula'-- ni'-dia  \ottr.  a  long  shot. 

Consider  some  statistics  from  Alexa 
Internet,  a  San  Francisco-based  divi- 
sion  ol  mighty  Amazon  com  The  com- 
pany s  primary  product  is  a  free  ser- 
vice that  provides  supplementary  hy- 
pertext links  and  other  information  to 
Web  surfers  To  do  the  job,  Alexa's  ro- 
'  "crawl"  the  entirety  of 
"  >.  The  most 
unted3.9 

Alexa  also  looks  at  Web  traffic.  By 
examining  usage  patterns  among  its 
users  —  500,000  people  In  109  coun- 
tries —  the  company  can  draw  a  pretty 
L'nix!  U  .id  on  who's  going  where.  What 
■  .  found  recently  may  come 
ingnf  a  shock:  Eighty  per- 
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half  of  1  percent  of  all  sites. 

Up  until  now,  1  have  believed  with 
out  question  that  the  Net,  by  its  very 
structure,  would  be  a  force  for  cultural 
diviasiti   rhKis.altei  all.  a  molten 
new  medium  unencumbered  by  regu- 
lations or  significant  barriers  to  entry 
Theoretically  anyone  with  a  S500  com- 
puter and  a  treebie  Web  site  can  ignite 
a  scandal  that  rocks  a  presidential  ad- 


s  elsewhere.  If 
Alexa  is  to  be  believed,  the  Web  has 
not  brought  about  the  atomization  of 


Yen  large  audiences  concentrated  by 
a  handful  of  very  large  omnibus 
brands.  The  old  one  to-many  broad 
cast  model  appears  to  be  alive  in  this 
medium  designed  for  many-to-many 
peer  communication. 

Analysts  given  to  glib  pronounce- 
ments would  explain  this  as  being  the 
natural  result  of  the  so  called  "network 
efliTl  '  l  lure  networks  (in  this  case, 
1,-ug.-  mU".  wilh  a  gnat  deal  of  traffic) 
achieve  a  critical  mass,  they  generate 
Uicir  own  growth  because  people  natu- 
rally want  to  go  where  other  people  al- 
reailv  congregate  In  other  words,  af- 
ter a  certain  point,  lhc  big  just  natural  ■ 
ly  get  bigger 

According  to  Alexa,  only  a  very  elite 
group  of  monster  brands  enjoy  truly 
global  success.  When  the  company  o- 
cenliv  tallied  the  most  popular  sites  in 
t.ii  li  of  15  overseas  markets  plus  the 
tinned  Suae-  lu'l  llirce  sites  showi-cl 
up  on  all  the  lists:  Yahoo,  MSN  and  Mi- 
c-rnMift  rein  (the  latter  two  both  owned 
bv  the  software  giant.) 
'  Looking  just  al  non-U  S  Internet 
traffic  in  February,  Alexa  s  lop  10  Web 
destinations  worldwide  were,  in  de- 
scending order.  MSN,  Yahoo, 
yahoo  co.jp  fYahoo  Japan), 
Microsoft  com,  AlLaYisIa  Geocities. 
Excite,  porncitynel,  Lycos  and,  finally, 
Kane  3  Taiwanese  'enrch  engine). 

Even  assuming  tliat  Uierc's  a  vast 
and  mulufaceted  world  witliin  each  of 
these  individual  properties  (Yahoo's 
communities  being  as  diverse  as  the 
Mel  :gell!.lhere:  '.nuicu'iuig  funda- 
mental! v  unbalanced  about  a  hit  pa- 
rod.  II;  it  is  80  percent  American. 

Perhaps  I'm  seeing  problems  where 
none  truly  exist-  Perhaps  Ihis  cultural 
hegemony  will  self-correct  over  time. 
As  many  people  seem  eager  to  remind 
me  these  days,  it  s  still  early  in  the 
game.  I'd  like  to  think  that  once  people 
become  comfortable  with  the  medium 
thev  will  be  less  inclined  tn  slavishly 
march  in  lock  step  toward  the  big  and 
the  familiar  I'd  like  to  hold  out  hope 
that  in  the  long  run  diversity  will  win. 
Mav  a  million  digital  flowers  bloom     ,. 
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It's  not  every  day  that  anyone  with  Internet  access  and  an  itch  for  a 
live  chat  with  the  Dalai  Lama,  Tibet's  spiritual  leader,  can  do  so. 
Such  a  rare  cyber  encounter  is  possible  Tuesday,  however.  Just  check 
out  the  live  global  interview  with  the  Dalai  Lama  to  be  Webcast  at 
www.aftonbladet.se,  the  site  of  a  Swedish  tabloid  daily.  The 
interview  will  begin  at  13:45  GMT  (15:45  in  Sweden)  and  is 
scheduled  to  last  30  minutes. 

Asia's  most  visited  Web  sites 

The  most  popular  Web  site  in  the  Asia-Pacific  region  in  April  was 
Yahoo  Japan's.  With  an  estimated  733,085,000  page  views, 
http://www.yahoo.co.jp  ranked  ninth  in  the  world,  according  to 
Alexa,  a  U.S.  Web  navigator  and  research  firm. 

But  Korean  Internet  sites  made  the  biggest  strides  in  global  rankings 
of  Web  traffic  in  April.  Daum  Communications,  www.daum.net, 
ranked  No.  1 1  in  the  world  with  nearly  652  million  page  views  in 
April; Yahoo  Korea  www.kr.yahoo.com,  ranked  No.  16,  with  352.7 
million  page  views;  and  Lycos  Korea,  www.lycos.co.kr,  ranked  No. 
23  with  281.7  million  page  views. 

Korea's  leading  hub  site  Intizen,  www.intizen.com,  posted  the  fastest 
growth  in  Alexa' s  list  of  world's  1,000  most  visited  sites  -  it  leapt  to 
a  ranking  of  134  from  771.  Alexa  compiles  monthly  rankings  of  top 
Web  hosts  based  on  the  aggregated,  anonymous  traffic  of  its  more 
than  a  half  million  users.  1135111 
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Putting  Amazon's  privacy  trial  on  the 
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Amazon. corn's  legal  battle  with  privacy  plaintiffs  is  scheduled  for 
trial  almost  a  year  and  a  half  from  now. 

It  faces  five  separate  class-action  suits  filed  on  grounds  of  electronic 
privacy  invasion.  The  U.S.  District  Court  in 
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the  plaintiffs  as  classes-a  move  Amazon 
opposes,  according  to  the  plaintiffs'  lawyers. 

The  company  has  refused  to  comment  on  the 
litigation. 


Judge  Marsha  Peckman  did  not  rule  on  the 
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Amazon  stands  accused  of  invasion  of  privacy 
under  Washington  state  law  and  of  violation  of  the  Computer  Fraud  and 
Abuse  Act  and  the  Electronic  Communications  Privacy  Act,  both  federal 
laws.  The  accusations  stem  from  its  implementation  of  technology 
acquired  along  with  Alexa  Internet  one  year  ago. 

Alexa  makes  software  that  monitors  Web  traffic  patterns.  Amazon  has 
transformed  that  technology  into  a  shopping  comparison  tool  dubbed 
zBubbles. 

Claims  that  Alexa  was  collecting  personal  information,  including  names 
and  physical  addresses,  about  individuals  sparked  a  complaint  to  the 
Federal  Trade  Commission  and  an  FTC  probe. 
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by  Daniel  Tynan 

(IDG)  -  In  the  real  world,  nobody  knows  what  TV  commercials  you  watch  or 
which  sitcoms  you  surf.  When  you  go  strolling  through  the  mall,  no  one's 
making  note  of  the  stores  you  visit  or  the  clothes  you  try  on.  But  on  the 
Internet,  Web  sites  are  doing  all  of  this  and  more.  And  that  makes  some 
people  mad  as  hell. 

Jeffrey  Wilens  is  so  outraged  that  he  filed  a  class  action  suit  against 
RealNetworks  for  allegedly  violating  his  and  other  consumers'  privacy.  The 
attorney  from  Mission  Viejo,  California,  claims  in  his  suit  that  the  company's 
RealJukebox  software  secretly  recorded  the  titles  of  music  CDs  and  MP3 
tracks  he  played  on  his  PC,  then  sent  the  data  back  to  RealNetworks  — 
creating  a  detailed  profile  of  Wilens'  musical  tastes.  The  suit,  filed  last 
November,  seeks  damages  of  at  least  $500  for  each  RealJukebox  user  in 
California. 
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Blaze  the  Trail  Carved  Out  by  Users 


By  Dawn  Anfuso 


In  an  industry  filled  with  innovators, 
Brewster  Kahle  still  stands  out  as  a  pioneer. 
As  far  back  as  1983,  Kahle  helped  start 
Thinking  Machines,  a  parallel  supercomputer 
maker.  He  then  invented  the  WAIS  (Wide 
Area  Information  Server)  system,  and  founded 
WAIS  Inc.  in  1989,  a  pioneering  electronic 
publishing  company.  Six  years  later,  he  sold 
the  company  to  America  Online. 

In  1996,  Kahle  founded  with  Bruce  Giliate 
San  Francisco-based  Alexa  Internet,  an 
Internet  navigation  service  that  uses  past 
users'  experiences  to  provide  links.  Here 
Kahle  talks  about  his  visions  for  Alexa,  for 
online  advertising  and  for  the  Internet  in  gen- 
eral. 


DIGITRENDS:  Alexa  is  based  on  a  concept  of 
creating  pathway  options  through  the  Internet  for  a  user  based  on  a 
collective  history  of  other  visitors  to  a  particular  site  and  where 
they  went  from  there.  Is  that  accurate  enough  a  description,  and 
how  did  you  come  to  such  a  concept? 

KAHLE:  Let's  start  with  an  analogy.  If  you're  walking  through  the 
woods  and  stumble  across  a  path  forged  by  another  hiker,  you  ben- 
efit from  that  person's  trails  as  they  guide  you  through  the  woods. 
Alexa  is  built  on  a  similar  principal.  We're  looking  at  the  paths 
users  take — in  aggregate  and  anonymously  through  the  Wet) — to 
help  guide  others  through  the  sometimes  unwieldy  Net. 

DIGITRENDS:  Is  it  working?  Do  you  have  any  formal  analysis  or 
study  that  has  shown  that  the  pathways  created  by  Alexa's  users 
make  sense?  Are  users  following  them?  It's  sort  of  an  anarchic 
environment,  isn't  it — people  voting  with  their  feet? 
KAHLE:  You'd  have  to  ask  the  millions  of  people  who  use  Alexa's 
Related  Links  integrated  into  Internet  Explorer  and  Netscape 
browsers  as  well  as  through  our  free  Web  navigation  service!  The 
browsers  have  viewed  our  Related  Links  as  a  vital  component  to 
better  navigation,  so  I'd  say  it's  working. 

The  fascinating  thing  about  these  paths  is  that  they  reflect  where 
people  go  on  the  Web  so  sometimes  they  might  not  make  immedi- 
ate sense.  For  instance,  you  could  be  researching  a  paper  on  early 


Brewster  Kahle 
CEO  &  President,  Alexa  Internet 


feminism  and  start  your  online  experience  with 
a  search  engine  to  actually  land  somewhere  use- 
ful. Once  there,  where  do  you  go  next  when 
you're  confronted  with  a  gazillion  results  that 
don't  really  pertain  to  early  feminism?  Alexa 
helps  uncover  the  gems  of  the  Web,  the  places 
that  people  have  discovered  are  extremely  use- 
ful but  that  may  not  pop  up  in  the  search 
engines. 

We  know  people  are  following  them  because 
we  get  feedback  all  the  time  from  users  who  say 
that  they've  found  the  most  incredible  sites 
using  Alexa.  And  the  related  links  just  keep  get- 
ting better  and  better,  a  clear  indication  that  peo- 
ple are  actually  following  them  and  benefiting 
from  these  paths.  We're  not  editorializing  these 
links  per  say,  but  we  are  analyzing  the 
anonymized  paths  of  our  users  to  give  us  an 
understanding  as  to  how  people  behave  on  the  Web  and  what's 
important  to  them.  In  essence,  we  know  what  people  dream. 


DIGITRENDS:  As  an  advertising  or  marketing  medium,  then,  how 
must  advertisers  approach  the  Web,  based  on  an  Alexa  model, 
where  the  behavior  of  the  user  isn  t  easily  predicted,  or  is  uncon- 
trolled by  a  centralized  portal  or  channel? 
KAHLE:  The  Web  is  the  ultimate  message  showcase  for  advertis- 
ers, enabling  unprecedented  targeting  based  on  multiple  variables. 
Previous  versions  of  Alexa  allowed  advertisers  to  target  by  subject, 
by  URL,  by  date  and  time,  to  name  a  few,  and  every  time  a  person 
would  turn  a  page,  a  new  ad  would  pop  up  in  the  toolbar  that  was 
based  on  this  targeting.  Imagine  that  you're  just  about  to  hit  the 
"buy"  button  on  a  vendor  site  and  up  pops  an  ad  on  the  toolbar  that 
says  "Buy  the  Canon  XL1  here  for  10  percent  less" — you  just  can't 
be  as  effective  or  as  in-your-face  in  the  off-line  world. 

DIGITRENDS:  You  have  been  quoted  as  saying  for  a  Web  site  or 
content  provider  you  must  be  useful  to  win?  What  constitutes  use- 
fulness in  your  opinion? 
KAHLE:  Usefulness  is  always  dictated  by  the  user  and  can  mean 
anything  from  pointing  a  user  to  a  Dutch  site  for  the  cheapest 
polyurethane  clogs  to  empowering  a  salesman  with  enough  data  to 
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help  him  evaluate  a  prospect  quicker  than  his  competition  can. 
Usefulness  can  be  a  data  point,  a  reference  or  review  that  provides 
insider  advantage,  or  the  ability  to  get  to  those  buried  sites  rich  in 
content  or  editorial  that  might  surface  as  someone's  senior  thesis 
on  Mesopotamian  cuisine  on  a  .edu  site — not  just  access  to  the  top 
900  sites  that  draw  over  50  percent  of  the  traffic  on  the  Web. 

DIGITRENDS:  Although  the  Internet  audience  has  reached  critical 
mass,  is  it  possible  to  mass  market  a  product  on  the  Internet? 
Outside  of  the  portal  deal,  how  does  one  collect  enough  audience 
on  the  Internet  to  be  comparable  to  other  mass  media? 
KAHLE:  Mass  marketing  a  product  on  the  Internet  and  reaching 
critical  mass  are  two  different  things.  Critical  mass  is  attained  by  a 
complex  combination  of  evangelism,  industry  endorsement,  tech- 
nological feasibility  and  mammoth  distribution,  not  to  mention 
sheer  good  luck  and  timing.  Whereas  mass-marketed  products 
enable  more  control  of  the  brand  and  message,  there's  no  guaran- 
tee an  industry  will  adopt  and  endorse  a  product.  Unless  it's  sup- 
ported by  a  myriad  of  off-line  efforts  to  help  reinforce  the  brand 
and  appeal  to  the  customer,  Internet  marketing  by  itself  cannot 
achieve  critical  mass. 

The  Internet  cannot  yet  be  compared  to  other  mass  media  simply 
because  it's  not  there  yet.  But  we  start  getting  close  when  we  can 
become  part  of  the  browser  or  find  other  ways  to  penetrate  the 
Internet  infrastructure. 

DIGITRENDS:  How  is  it  going  for  Alexa  in  terms  of  user  accep- 
tance growth,  distribution  channels,  partnerships,  etc?  What  have 
been  your  challenges  to  date? 

KAHLE:  Well,  as  I  mentioned  before,  we've  had  4.5  million 
installs  of  the  Alexa  service  and  have  been  injected  into  the 
Internet  infrastructure,  so  we've  enjoyed  some  pretty  phenomenal 
user  acceptance.  Both  Microsoft  and  Netscape  continue  to  be 
major  distribution  partners  for  us,  as  have  many  other  channels  and 
partners  with  whom  we  have  strategic  relationships. 

That  said,  there  are  always  challenges  inherent  to  downloading  a 
widget  vs.  merely  visiting  a  site.  But  now,  installing  a  piece  of 
client-side  software  is  no  more  time-consuming  or  difficult  than 
waiting  for  a  new  HTML  Web  page  to  install.  We're  constantly 
working  to  overcome  consumer  resistance  to  downloading  soft- 
ware by  educating  them  about  the  process  and  making  it  as  easy  to 
get  Alexa  as  possible. 

DIGITRENDS:  How  would  you  define  the  Internet  in  its  current 
state  as  a  media  channel?  And  how  would  you  see  its  structure 
developing  in  terms  of  audience,  of  content,  of  traffic  flow,  in  the 
next  two  to  five  years? 
KAHLE:  My  fear  is  that  the  Web  will  become  like  our  TV  sets, 


with  50  channels  of 
just  nothing  on  the  Web.  What  we  need  are 
fewer  channels  and  less  replication  of  content,  and  dictated  by  the 
needs  and  desires  of  various  audience  segments.  But  right  now,  TV 
is  pretty  useless,  with  the  exception  of  some  of  the  public  educa- 
tion channels. 

DIGITRENDS:  You've  been  on  the  cutting  edge,  avoiding  the 
bleeding  edge,  with  your  past  ventures.  How  do  you  see  the  future 
of  Alexa,  and  on  a  personal  note,  what  are  your  plans  for  what 
you'd  like  to  be  doing  over  the  next  few  years? 
KAHLE:  We  will  continue  to  build  more  useful  features  into  Alexa 
so  that  we  can  help  our  users  make  more  informed  business  and 
personal  decisions  while  surfing  the  Web.  And  we're  working  with 
Amazon.com  to  support  e-commerce  initiatives  for  Amazon.com 
users  to  find  and  discover  anything  they  may  want  to  buy  online. 

I'm  personally  interested  in  building  wireless  communities,  and 
am  busy  establishing  a  wireless  infrastructure  here  in  the  Presidio 
of  San  Francisco.  Of  course  I've  got  some  more  ideas  of  things  I'd 
like  to  be  doing,  but  right  now  I'm  exactly  where  I  want  to  be  in 
terms  of  working  with  some  of  the  brightest  people  in  the  industry 
to  impact  the  way  people  think  about  using  the  Web. 

I'm  also  on  the  board  for  the  Internet  Archive  (www.archive.org), 
Alexa's  sister  non-profit  organization  that  serves  as  a  repository  of 
Web  content  gathered  from  early  1996  to  the  present.  Alexa  actu- 
ally donates  a  copy  of  all  data  captured  in  its  Web  crawls  to  the 
Internet  Archive  to  be  used  by  generations  of  future  scholars  and 
historians. 

In  the  millennium,  the  Internet  Archive  plans  to  archive  one  full 
year  of  television  across  20  channels  from  around  the  world  to 
expand  its  growing  moving  images  archive,  the  eventual  goal  of 
which  is  to  make  this  collection  free  and  accessible  to  the  public. 
This  will  be  a  hugely  fun  and  consuming  project!  ■ 

Dawn  Anfuso  is  Managing  Editor  of  Digitrends. 
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ADVISORY      BOARD 


Vivienne  Lee  Bechtold 


John  W.  Sullivan 


The  Digitrends  Editorial  Advisory  Board  mem- 
bers are  charged  with  advising  Digitrends  edi- 
tors on  editorial  development,  participating  in 
roundtable  discussions  that  cover  the  pressing  issues 
and  challenges  of  the  day,  and,  when  possible,  con- 
tributing columns  and  articles.  Their  involvement 
with  Digitrends  is  key  to  enabling  the  journal  to 
serve  its  readers,  who  hold  positions  of  similar 
responsibility  at  their  companies. 

Digitrends  is  excited  and  honored  to  welcome  the 
following  three  professionals  to  our  distinguished 
panel.  — The  Editors 

Vivienne  Lee  Bechtold,  i-Knowledge, 
Director,  Global  i-Ventures,  Procter  &  Gamble 

Vivienne  Lee  Bechtold  was  recognized  in  1999  by 
Advertising  Age  as  "Interactive  Marketer  of  the  Year". 
Bechtold  graduated  from  M.I.T.  (Massachusetts 
Institute  of  Technology)  with  a  Bachelor  of  Science  in 
Computer  Science  and  Engineering  in  1 986.  She  spent 
her  first  two  years  with  Procter  &  Gamble  as  a  systems 
analyst  in  the  Information  Technology  Department 
and  then  transferred  into  the  Marketing  Department 
working  in  the  Beauty  Care  Sector.  After  spending 
several  years  working  on  the  U.S.  Hair  Care  busi- 
ness, she  became  the  Brand  Manager  in  P&G's  Hair 
Care  Worldwide  Strategic  Planning  organization, 
with  global  responsibility  for  the  Vidal  Sassoon  and 
Pantene  brands. 

In  1997,  Bechtold  co-founded  the  P&G  Interactive 
team  where  she  is  chartered  with  figuring  out  how  to 
leverage  the  Internet  and  other  new  media  to  build 
P&G's  businesses.  She  is  now  director  of  the  i- 
Knowledge  group  within  P&G's  newly  formed 
Global  i-Ventures  organization,  which  has  responsi- 
bility for  leading  P&G's  overall  Internet  strategy.  She 
also  serves  as  a  board  member  of  the  steering  com- 
mittees for  industry  organizations,  FAST  and  CASIE. 

Sally  McKenzie,  Director  of  Merchandising, 
Planning  &  Operations— l-Media,  Eddie  Bauer 

Sally  McKenzie's  responsibilities  include  financial 
planning,  merchandising,  portal  management  and 
business  strategy  for  www.eddiebauer.com  and 
www.eddiebaueroutlet.com. 

McKenzie  joined  Eddie  Bauer  in  1990  as  Product 
Manager  for  Outlet  stores.  She  was  promoted  to 


Merchandising  Manager  of  I-Media  in  1996,  Senior 
Manager  in  1998  and  assumed  her  current  position  in 
1999. 

A  noted  guest  speaker  at  numerous  e-commerce 
events,  including  those  of  the  Northern  California 
Catalog  Club,  The  Washington  Retail  Association, 
The  University  of  Washington  MBA  Program,  The 
Northwest  Internet  Consortium  and  the  Retired 
Jewish  Men's  Club  of  Seattle,  McKenzie  serves  on 
the  advisory  board  of  Internet  Retailer  Magazine. 

McKenzie's  previous  experience  includes  The  Bon 
Marche,  Jay  Jacobs  and  Greatfood.com  where  she 
held  various  positions  including  Merchandise  Buyer 
and  Marketing  Manager. 

McKenzie  holds  a  BA  degree  from  Washington 
College  in  Chestertown,  Maryland. 

John  W.  Sullivan 

Senior  Vice  President— Internet  Commerce 

Hallmark  Cards,  Inc. 

Sullivan  joined  Hallmark  in  1977  in  merchandis- 
ing. Following  a  series  of  product  development 
assignments,  in  1987  he  was  named  general  manager 
of  the  Shoebox  alternative  card  unit.  In  1993,  after 
playing  a  key  role  in  the  redesign  of  Hallmark's  busi- 
ness processes,  Sullivan  became  general  manager  of 
the  Hallmark  brand  everyday  greeting  card  unit.  In 
1995,  he  became  general  manager  of  everyday  greet- 
ing cards  for  both  the  Hallmark  and  Ambassador 
brands.  His  most  recent  role  was  vice  president, 
emerging  brands  and  channels.  He  was  responsible 
for  licensing,  consumer  products  technology, 
Hallmark  Business  Expressions,  party  goods,  ethnic 
brands  and  the  William  Arthur  and  Ensemble  sub- 
sidiaries. 

In  his  current  position,  Sullivan  is  responsible  for 
the  strategy  and  development  of  Internet  Commerce 
for  Hallmark  including  fulfillment  capabilities,  site 
content,  product  management,  industry  affiliations 
and  marketing. 

Sullivan  also  is  a  corporate  officer  and  serves  on  the 
company's  North  American  management  team.  He 
also  serves  as  past  president  on  the  executive  com- 
mittee of  the  Greeting  Card  Association,  an  industry 
organization. 

Sullivan  holds  a  bachelor  of  science  degree  in  mar- 
keting and  management  from  Rockhurst  College.  ■ 
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SITE    UNSEEN 

Who's  Visiting  Your  Site? 

By  Stephanie   Clifford  ,  September  27,  2000 
Print  Article  |    Email  This  Article   | 

Alexa  Research  wiH  tell  you. 

What  kind  of  traffic  is  your  site 

attracting?  How  about  your 

competitors'  sites?  Find  out  with 

Alexa  Research's  Web-user 

statistics.  The  free  database  surveys 

the  top  1,000  most-trafficked  websites  and  lets  you  specify 

what  information  you  want.  For  example,  you  might  choose 

to  see  the  most  popular  U.S. -based  websites  as  viewed  by 

users  in  India  for  August  2000.  (In  case  you're  curious,  they 

were  Msn.com,  Yahoo.com,  and  Netaddress.com.) 

Alexa  charges  a  fee  for  its  more  advanced  features,  such  as 
in-depth  reports  that  detail  other  sites  your  visitors  surf, 
your  site's  internal  traffic,  and  the  most  popular  search 
terms  on  your  site.  Also,  paid  subscribers  can  receive  stats 
on  the  top  100,000  sites. 

A  few  Web-traffic  reports  from  PC  Data  Online  are  free  (but 
unlike  with  Alexa,  the  search  results  cannot  be  sorted); 
reports  with  deeper  analysis  are  not.  Media  Metrix,  another 
traffic-stats  site,  offers  free  charts  on  various  stats  including 
demographics  that  can  be  downloaded  to  your  desktop  for 
your  next  presentation. 

Article  Page:  1    |    Next  Article  > 

Web  Weekly:   [Who's  Visiting  Your  Site? 
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only  you  will  see  its  contents  --  a  restriction  common  for 
legal  reasons. 

Beta  iKena  also  lets  you  chat  and  browse  in  a  group. 
Though  its  interface  is  slightly  more  comfortable  and 
less  complicated  to  use  than  Net2gether's,  iKena  works 
with  IE  only.  Unfortunately,  there's  no  leader;  anyone 
can  enter  a  URL.  Democratic  but  ineffective,  this 
system  means  that  parties  with  slower  connections  will 
inevitably  find  new  pages  loading  before  they  have  a 
chance  to  view  the  previous  page.  Like  unmoderated 
conference  calls,  iKena  sessions  become  a  jumble  of 
user  input. 

SideTalk  incorporates  a  number  of  features  within  its  IE 
Explorer  bar  (Netscape  SideTalk  is  on  its  way), 
including  bookmark  management  and  related  site 
listing.  SideTalk's  floating  chat  window  is  easier  on  the 
eyes  than  the  tiny,  bottom-of-the-screen  solutions  are. 
Co-browsing  sessions  can  be  public  or  private,  and  the 
session  creator  can  maintain  leadership  or  pass  it  on. 

Sit  Back,  Relax,  and  Enjoy  the  Web 

When  you  sign  up  with  eTour,  you're  presented  with  a 
list  of  interests  to  choose  from.  This  is  the  last  decision 
you'll  have  to  make.  The  eTour  bar  appears  as  a  frame 
in  your  browser,  with  a  big  button  marked  Next,  along 
with  a  few  others.  Hit  Next  and  you're  taken  to  a  site 
related  to  one  of  your  interests.  To  mix  things  up  a  bit, 
you  can  go  on  a  prebuilt  tour  in  Surf  by  Interest  (not 
based  on  the  interests  you  entered).  Naturally,  eTour 
has  its  own  bookmark  utility,  for  snapshots  of  your 
eTour  vacation. 

The  more  aggressive  Roboguide  directs  your  viewing 
from  the  moment  you  enter  the  site.  Roboguide  has 
dozens  of  prearranged  tours,  their  purpose  more  to 
inform  than  to  entertain.  In  addition  to  these,  you  can 
create  tours  for  others  to  view.  You  can  also  pause 
tours  to  follow  interesting  links,  though  you  may  have  to 
browse  back  to  continue  touring. 

Intended  for  creating  tours,  SpotOn  contains  a  fair 
collection  of  user-created  tours  as  well.  The  full  SpotOn 
program  works  only  in  IE,  running  as  an  Explorer  bar, 
though  you  can  play  tours  in  Netscape  as  well.  Because 
SpotOn  tours  are  user-created,  content  quality  is 
unpredictable.  You  can  compile  your  own  set  of  sites, 
though,  and  e-mail  them  to  friends  or  colleagues. 
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net  results 


A  weekly  Web  traffic  report  from  Nielsen/NetRatings 
(www.nielsen-netratings.com),  the  Internet  audience  mea- 
surement service  of  Nielsen  Media  Research  and  NetRatings. 
Find  more  NetResults  at  adage.com/dataplace. 
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Total  active  U.S.  Web  audience  and  total  number  of  unique, 
unduplicated  visitors  to  the  10  most-visited  Web  properties 
for  the  week  noted. 
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The  most-visited  Web  properties  for  the  week  ended  Aug 
Rank   Property Unique  audience  Avq.timesp 


1 

America  Online 

2 

Yahoo! 

3 

Microsoft  Corp. 

4 

Lycos  Network 

5 

Excite@Home 

6 

Go  Network 

7 

About.com 

8 

eBay 

9 

Time  Warner 

10 

AltaVista  Co. 

28,600,366 

0:13:44 

25,076,015 

0:30:05 

22,929,138 

0:21:44 

9,591,852 

0:10:43 

8,796,715 

0:16:16 

7,676,203 

0:13:59 

5,189,953 

0:06:13 

4,952,918 

0:53:30 

4,827,816 

0:09:35 

4,660,317 

0:09:54 
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Top  15  Internet  banner  ads  at  home 

The  most-viewed  ad  banners  for  the  week  ended  Aug.  6. 


Rank  Advertiser 


1  Bonzi.com  Software      4,608,222 

2  ClassMates.com  3,673,896 

3  GetSmart.com 

4  Capital  One 

5  Capital  One 

6  Citibank 

7  Capital  One 

8  Capital  One 

9  Bonzi.com  Software      2,773,689 

10  Advertising  Council      2,635,568 

11  NetRadio.com  2,567,226 

12  GetSmart.com  2,564,374 

13  Eterm  2,494,645 

14  Barnes  &  Noble  2,392,647 

15  AmeriDebt  2,347,454 


Ranked  by  impressions  for  the  week  ended  Aug.  6. 
Impressions  Unique  audience 
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Ranked  by  unique  audience  for  the  month  of  June. 

Ranl,    URL  Unique  audience  Avg.  time  spent 


1 

TrustE 

545,778,600 

15,475,449 

24.6 

2 

Microsoft  Corp. 

361,394,854 

23,418,891 
17,800,422 
2,267,834 

37.2 

3 

Yahoo! 

207,289,587 

28.3 

4 

AIIAduantage.com 

145,823,303 

3.6 

5 

America  Online 

137,914,519 

17,443,119 

27.7 

6 

eBay 

116,314,720 

9,700,513 

15.4 

7 

Amazon.com 

103,405,521 

18,501,668 

29.4 

8 

Casino-on-Net 

80,749,537 

7,705,814 

12.2 

9 

Next  Card 

76,398,546 

10,710,966 

17.0 

10 

GetSmart.com 

73,421,579 

7,160,007 

11.4 

microsoft.com 

real.com 

macromedia.com 

shockwave.com 

icq.com 

bonzi.com 

download.cnet.com 

apple.com 

mcafee.com 

alexa.com 


16,411,094 

0:08:30 

7,418,211 

0:05:21 

6,387,157 

0:03:19 

3,515,309 

0:16:55 

3,508,784 

0:08:44 

3,304,697 

0:03:51 

2,925,231 

0:07:14 

2,276,455 

0:03:15 

2,025,460 

0:12:05 

1,900,569 

0:04:09 
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Netpliance  Takes  New  Approach 
To  Non-PC  Internet  Access 


BY    REID    GOLDSBOROUGH 


From  all  the  hoopla,  you'd  think  the 
Internet  was  about  to  do  away  with 
television,  radio,  CDs,  retail  stores, 
telephones,  fax  machines,  books, 
magazines  and  newspapers.  While  the  Net 
does  create  competition  and  opportunities 
for  businesses  involved  with  these 
channels,  a  lot  of  people  don't  have, 
or  want,  Internet  access. 

More  than  60  percent  of  the  U.S. 
population  aged  16  years  and  older  is 
still  offline,  according  to  a  recent 
survey  by  market  research  firm 
IntelhQuest,  and  44  percent  have  no 
intention  of  going  online. 

Most  analysts  point  to  the  cost 
and  complexity  of  personal  comput- 
ers as  the  reason.  Prices  may  be 
falling  and  ease  of  use  rising,  but 
PCs,  Macs  and  Internet  access  still 
cost  good  money.  And  unless  you're 
a  kid  weaned  on  them,  using  a 
computer  isn't  child's  play. 

Seeking  to  tap  into  the  potentially 
lucrative    market    of  the    computer 
illiterate,  companies  are  introducing 
devices    designed    for    connecting    to    the 
Internet  that  are  smaller,  simpler  and  cheaper 
than    PCs.    Dubbed   "Internet    appliances," 
these     devices     can     only    accelerate     the 
Internet's  growth. 

I  spent  the  past  few  weeks  testing  the  one 
Internet  appliance  that  to  me  looks  best  on 
paper,  and  I  was  impressed  with  its  potential. 
I-opener  from  Netpliance  of  Austin,  Texas, 
distinguishes  itself  from  TV-based  devices 
such  as  Microsoft's  WebTV  in  that  it  uses  a 
computer  monitor  for  better  viewing  of  text 
and  Web  graphics.  It  distinguishes  itself  from 
personal  digital  assistants  such  as  3Com's 
PalmVII  and  smart  phones  such  as  Motorola's 
ilOOO  plus  in  that  it  has  a  full-size  keyboard 
for  speedy  text  entry.  And  it  distinguishes 
itself  from  e-mail  devices  such  as  the  Cidco 
MailStation  in  that  you  can  browse  the  Web 
along  with  exchanging  e-mail. 

The  best  thing  about  the  I-opener  is  its 


automation.  You  just  plug  the  power  cord 
into  an  outlet  and  the  phone  cord  into  a 
phone  jack,  and  the  machine  configures 
itself.  Each  time  you  use  it  you  just  hit  the 
power  button  and  the  machine  connects 
with    its    internal    56    kilobit-per-second 


Netpliance's  I-opener  makes  it  easy  for  those  who  don't  want  or 
need  a  full-fledged  computer  to  connect  to  the  Web. 

modem,  using  either  a  local  or  a  toll-free 
number.  If  none  of  its  300  dial-in  access 
numbers  is  a  local  call,  you  pay  no  more  for 
800-number  access,  unlike  with  a  typical 
Internet  service  provider. 

The  I-opener  costs  $199,  and  there's  a 
monthly  charge  of  $21.95  for  unlimited 
access,  which  is  the  same  as  America  Online 
but  slightly  more  than  most  Internet  service 
providers. 

For  e-mail,  you  get  an  address  book  and 
the  ability  to  send  and  receive  attachments, 
though  you  can't  automatically  append  a  sig- 
nature to  outgoing  e-mail  or  filter  incoming 
e-mail.  For  Web  surfing,  you  can  save  your 
favorite  sites,  and  you  can  access  news, 
weather  and  other  preconfigured  sites  by 
hitting  special  keys  on  the  keyboard.  There's 
even  a  key  for  ordering  pizza. The  proprietary 
browser  supports  audio  but  not  video. 

The  unit  itself  looks  a  bit  like  a  notebook 


computer.  The  10-inch  flat-panel  color 
display  is  similar  though  smaller  than  those 
used  with  notebooks.  With  its  800x600  dpi 
resolution,  it's  quite  readable.  The  keyboard, 
though  detached,  has  an  integrated  pointing 
device  similar  to  those  used  in  portable  PCs. 
Since  one  logical  market  for  Internet 
devices  such  as  the  I-opener  is  people  who 
came  of  age  before  the  PC  era,  I  gave  the  unit 
to  my  parents  to  test.  Their  technical 
ability  is  such  that  they  have  no 
problem  turning  on  a  light  switch. 
They  were  able  to  get  up  to  speed 
quickly  enough  despite  stumbling  a 
bit  coordinating  the  pointing  device. 
In  the  first  half  of  2000,  Netpliance 
plans  to  release  another  version  of  the 
I-opener  with  a  touch  screen  that 
should  make  navigating  even  easier. 

Though  Netpliance  expects  to  sell 
I-opener  through  retail  stores,  it's 
currently  available  outside  of  New 
York  City  only  from  the  company 
through  its  Web  site  (uww.netpliance 
.com),  by  phoning  1-888-IOPENER 
or  from  a  smattering  of  mall  kiosks. 

This  is  a  new  product,  and 
bleeding-edge  glitches  are  expected. 
Holding  down  the  CapsLock  key 
crashed  the  system,  forcing  me  to  unplug  and 
replug  to  get  it  working  again.  Also,  I 
sometimes  had  trouble  connecting  to  certain 
preconfigured  Web  sites.  And  in  testing 
technical  support,  I  didn't  always  receive  a 
call-back  within  the  promised  two  hours. 

Despite  the  snags,  this  is  a  clever  product. 
A  number  of  other  companies  are  planning 
to  release  similar  devices,  including  big  names 
such  as  Compaq  and  Gateway  and  other 
smaller  companies  such  as  WebMachines  and 
Qubit  Technology.  Though  it's  a  start-up, 
Netpliance  isn't  wet  behind  the  ears.  Its 
founders  include  former  executives  from 
IBM  and  Cisco  Systems.  0 

Reid  Goldsborough  is  a  syndicated  columnist  and 
author  of  the  book  Straight  Talk  About  the 
Information  Superhighway.  He  can  be  reached 
at  reidgold@netaxs.com  or  http://mem.bers 
.home.net/reidgold. 
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LINUX  IN  THE  LIMELIGHT 


Linux  Targets 
With  Transmeta 


Mobile  Users 
Chips,  Software 


BY  AMARA   D.    ANGELICA 


After  five  years  of  intrigue  and  rampant 
speculation,  Santa  Clara-based 
Transmeta  has  finally  unveiled  its 
"mobile  Internet  computing"  Crusoe 
chips  (www.crusoe.com).  So  what  does  it  mean 

for      the      average 

Linux  software/ 
systems  developer? 
Linux  inventor 
and  Transmeta 
software  engineer 
Linus  Torvalds 
believes  Crusoe 
processors  will 
make  possible  a 
new  generation  of 
lightweight  mobile  products  with  laptop- 
rivaling  multimedia  features  and  graphical 
user  interface.  And  those  devices  will  create 
a  whole  new  market  for  Linux,  specifically 
Transmeta's  new  "Mobile  Linux." 


MAJESCO  > 

A    U  A  S  I  1 1    SUBSI8IARY 
Majesco  Software  Inc. 

If  you  are  looking  to  grow  with  a  company  that  has  already  achieved 
100%  growth  and  is  still  on  it's  way  up,  Majesco  Software,  Inc.  is  the 
way  to  go  !!!  Continuing  to  move  at  a  fast  pace  in  a  potentially  $7  bil- 
lion industry,  Majesco  Software,  Inc.  is  aiming  at  becoming  an  essen- 
tial extension  to  all  our  clients. 

Majescians  work  their  magic  while  travelling  around  the  US.  Here  is 
your  opportunity  to  see  the  nation. 

We  are  looking  for  Majescians.  to  work  on  the  Clarify,  Vantive  and  the 
Siebel  practice  area,  with  a  background  of  2+  years  on  software  pro- 
gramming with  visual  basic,  C++,  experience  in  data  migration  and 
object  design  experience  in  a  Corba  environment. 

Majesco  offers  industry  competitive  compensation  and  benefits 
package. 

Are  you  ready  for  the  challenge? 

Open  positions : 

•  Associate  Consultant  •  Senior  Consultant 

•  Principal  Consultant  •  Regional  Sales  Manager 

•  Software  Engineer 

Send  resume  to:  Majesco  Software  Inc. 

4699  Old  Ironsides  DR.  #  350 

Santa  Clara,  CA  95054 

Fax:  (408)  980-1255 

hr@majesco.com 

Principals  only.  EOE 


"The  Mobile  Linux  target  code  size, 
including  graphical  user  interface  and 
full  Netscape  browser,  will  be  32  MB," 
he  says.  Instead  of  a  bulky  hard  disk, 
"Flash  ROM  storage  is  optimal — it's  cheap 
because  it's  widely  used  in  cameras  and 
it  allows  for  BIOS  upgrades." 

Transmeta's  Crusoe  processors  will  employ 
radical  new  technologies 
to  dramatically  speed 
up  chip  performance 
while  decreasing  power 
consumption. 

These  include  more 
effective  power  man- 
agement and  "code 
morphing"  software  that 
translates  "x86"  instruc- 
tions written  for 
standard  Intel  chips 
into  super-fast  128-bit 
"VLIW"  form,  doing  the  job  with  one 
quarter  the  number  of  transistors. 

In    combination,    these    will    eliminate 


the  need  for  bulky  fans  or  heat  sinks 
and  increase  battery  life.  A  neat  spinoff 
of  code  morphing:  on-the-fly  processor 
upgrades,  trimming  the  time  to  develop 
new  chips. 

GROWING  MOBILE  MARKET 

The  market  for  palm-size  and  other 
mobile  devices  is  growing  at  a  dizzying 
compound  annual  growth  rate  of 
40     percent,    with     seven     million     units 


Transmeta's  333-400  MHz  TM3120  chip  (left),  running  Mobile  Linux,  is  for 
Web  pads  and  other  mobile  devices.  The  500-700  MHz  TM5400,  running 
Windows,  is  for  laptops. 

expected  to  be  shipped  this  year  and 
21  million  in  2003,  according  to  research 
firm  Dataquest. 


Mobile  Linux  Tips  From  Linus 


Want  to  work  with  Mobile  Linux? 
Torvalds  offers  these  ideas  for 
software  developers  who  want  to 
extend  the  new  platform  (also  see 
Transmeta's  "Developer  Island"  at 
www.  transmeta.com  Idev) : 

■  "Virtual  keyboard"  user  interfaces  for 
input  without  keyboards. 

■  Drivers — Transmeta  has  developed  a 
few  for  the  Mobile  Linux  reference 
platform,  but  many  more  are  needed 
for  target  devices. 

■  Software  for  downloading  upgrades. 

■  Deluxe  versions  of  PDA  calendars  and 
other  apps. 


■  "Assuming  a  wireless  network  with 
wide  bandwidth,  interesting  options 
include  loading  plug-ins  and  other 
software  upgrades  over  the  network. 
The  problem  is  the  lack  of  network 
standards." 

■  "Some  developers  have  suggested 
68000  compatibility  for  running  Palm  OS 
applications."  This  is  under  consideration 
by  Transmeta,  Torvalds  says. 

But  any  Linux  work  should  be  a  labor 
of  love,  Torvalds  adds.  "People  shouldn't 
look  for  other  peoples'  projects,"  he  says. 
"If  they  do  what  they  are  really  interested 
in,  they'll  finish  what  they  started." 
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•  Price  as  tested:  Free 

•  System  requirements  :  Windows  95,  98,  2000,  NT; 
Internet  Explorer 

•  Editors'  rating:  •••• 

•  Be  one  of  the  first  to  rate  this  product 


Specs  &  Features 
Company  Info 


•  Overview 

•  Full  Review 

Full  Review 

From  PC  Magazine  /  May  10,  2000,  By  Don  Willmott 


!   i  T  i  ,>The  premise  behind  SideTalk,  a  free  Internet 
i  i  i  ui  Explorer  add-on,  is  that  Web  surfing  need  not  be 
I   ■   mi  a  solitary  experience.  The  service  offers  several 
SfjSfe  ...Stools  for  exploring  the  Web  in  groups,  discussing 
lii  i.  ii  mm  sites  in  context,  and  leaving  notes  at  sites  for 
other  SideTalk  users  to  see. 


•  Tests  &  Ratings 


The  multipane  interface,  which  sits  vertically  at  the  left  side 
of  the  browser,  delivers  links  related  to  the  site  you're 
currently  visiting  (a  la  Alexa),  lets  you  leave  annotations  on  a 
Web  page  for  other  SideTalk  users  to  see  (a  la  ThirdVoice), 
and  lets  you  form  clubs  and  invite  people  to  join  them.  Most 
important,  SideTalk  lets  you  browse  along  with  several  other 
people  either  on  a  public  tour  or  privately,  so  you  can  shop 
or  make  plans  together. 

SideTalk's  co-browsing  feature  is  what  makes  the  software 
most  useful.  It's  extremely  simple  to  set  up  a  co-browsing 
session  and  start  a  tour,  chatting  online  with  your 
companions  as  you  go.  Other  viewers  can  ask  to  have 
control  of  the  tour,  and  you,  as  the  leader,  can  choose 
whether  to  grant  the  request. 

This  first  release  is  missing  some  features;  those  are 
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promised  lor  ruiure  upaaies.  ror  example,  a  noies  Teaiure 
will  let  you  add  your  own  private  notes  to  sites  (you  can 
leave  your  password  right  on  a  site)  and  do  highlighting. 

Of  course,  any  community  is  only  as  interesting  as  the 
people  in  it.  If  you  start  using  SideTalk  now,  you'll  see  the 
potential  of  the  service  but  not  the  crowds  that  will  help  the 
service  live  up  to  its  promise. 

SideTalk  combines  many  communication  features  into  one 
interface.  Its  co-browsing  tool  is  the  real  highlight  and  the 
main  reason  you  should  consider  installing  the  program  (and 
getting  your  surfing  buddies  to  install  it,  too). 

Read  More: 

Top  100  Web  Sites:  Surfing  Assistants 


SideTalk  SideTalk 

•  Overview  *  Specs  &  Features  •  Tests  &  Ratings 

•  Fuli  Review  •  Company  Info 


Sponsored  Links 

Turbo  mail  Upgrade  your  email,  add  fax  and  voice  features  for  FREE! 
Egghead 
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"I  don't  accept  the  concept  that  there  is  no 
privacy  on  the  Internet,"  Wilens  says.  "I  think 
rogue  companies  need  to  learn  to  modify  their 
behavior." 


□  MESSAGE  BOARD 
Internet  society 


WEB  SERVICES: 


RealNetworks  flatly  denies  Wilens'  charges.  "Contrary  to  media  reports,  we 
have  never  monitored  user  behavior  or  listening  habits,"  says  Keela  Robison, 
product  manager  for  the  Seattle-based  company.  However,  she  admits  that 
RealJukebox  did  create  a  unique  identification  number  for  each  user  and 
stored  the  numbers  in  the  same  database  that  holds  user  names  and  e-mail 
addresses.  Theoretically,  these  numbers  could  track  where  people  go  on  the 
Web.  The  company  quickly  released  a  patch  that  disabled  the  software's 
ability  to  issue  the  IDs,  but  that  wasn't  enough  to  satisfy  Wilens  and  others 
who  had  filed  a  total  of  a  dozen  suits  against  RealNetworks  at  press  time. 

Meanwhile,  six  other  lawsuits  are  pending  against  Internet  advertising 
network  DoubleClick  for  creating  online  profiles  of  consumers.  And  three 
similar  suits  have  been  filed  against  Alexa,  an  Amazon  subsidiary.  With  few 
other  avenues  of  recourse  at  their  disposal,  users  have  taken  to  the  courts  to 
fight  for  their  right  to  privacy.  But  the  battle  has  just  begun. 

A  not-so-private  little  war 

Welcome  to  privacy  in  the  new  millennium,  where  surfers  are  caught  in  a 
tug-of-war  with  Web  sites  over  who  owns  their  personal  data  and  what  can  be 
done  with  it.  In  the  year  and  a  half  since  PC  World  published  its  special 
report  "Privacy  in  the  Internet  age"  (see  link  below),  e-commerce  has 
exploded,  doubling  in  volume  each  year.  And  as  the  Net  gradually  becomes 
the  medium  most  Americans  use  to  get  news,  buy  groceries,  rent  movies, 
obtain  medical  advice,  and  possibly  vote  for  presidential  candidates,  what 
little  personal  privacy  they  once  had  may  soon  disappear. 

In  some  cases,  we  have  only  ourselves  to  blame.  Millions  of  people 
voluntarily  give  out  personal  information  to  Web  sites  in  exchange  for  free 
goods  and  services.  These  days,  you  can  get  e-mail  accounts,  Web  hosting 
services,  Internet  access,  even  high-speed  DSL  connections  without  ever 
cracking  open  your  wallet.  But  to  take  advantage  of  such  offers  you  must 
surrender  bits  and  pieces  of  your  identity,  from  your  name  and  e-mail  address 
to  your  buying  and  reading  habits.  Businesses  then  market  this  information  to 
advertisers,  or  in  some  cases,  to  anyone  else  who  may  want  it. 

At  the  same  time,  it's  increasingly  difficult  to     more  computing  in 

trust  any  site  to  keep  your  personal  ^       , 

information  safe  from  intruders.  Lax  security     v  nir*    JDG.net  home  page 


Nasdaq  ham 
Riding  inflate 

After  hours  c 

(MORE) 

MARKETS 
DJIA      *   5. 
NAS       ♦  4! 
S&P       ♦  4 


a 

SPORTS 

After  Game  i 
have  new  life 

Young  forma 
with  fax  to  4i 

Illinois  name 
coach 

(MORE) 
■*  All  Scoreb 


WEATHER 
Enter  your  U 

I * 

Click  here  fo 
world  cities 


WORLD 

Eritrea  repor 
for  cease-fire 
Ethiopia 


Justice  Depc 
assassinatio 
conspiracy 

POLITICS 


http://www.cnn.com/2000/TECH/computing/05/24/privacy.2000.idg/index.html 


6/9/00 


CNN.com  -  Technology  -  Privacy  2000:  Should  you  trust  the  Web?  -  May  24,  2000 


Page  3  of  10 


bno 

BARNES    NOBLE 


I  Keyword 


® 


Cf\N20 


ai  many    titu   vv^imvjia  naa  uiaut-  uiu  1111^111^1  a 

hacker's  paradise.  In  the  past  six  months, 
dozens  of  major  Web  sites  have  suffered  theft 
of  credit  card  information  and  acts  of 
vandalism  such  as  last  February's  spate  of 
denial-of-service  attacks.  As  PC  World  has 
discovered,  even  the  biggest  e-commerce 
sites  can  fall  prey  to  crackers  —  hackers  who 
attack  with  criminal  intent  (see  "E- 
commerce's  dirty  little  secret,"  link  below). 

In  addition,  the  Web  has  spawned  a  booming 
industry  of  companies  peddling  so-called 
investigative  services  and  software.  Loads  of 
personal  information  --  from  your  Social 
Security  number  to  your  driving  records  ~ 
can  be  purchased  online  for  a  pittance  by 
anyone  interested  in  tracking  you  down  or 
assuming  your  identity.  In  most  cases,  the 
sale  of  this  data  is  perfectly  legal.  But  the 
results  can  sometimes  be  deadly  (see  "They 
know  everything  about  you,"  link  below). 
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Sure,  you  can  try  to  protect  yourself  by  giving  out  false  information  or  using 
services  that  cloak  your  identity  and  IP  address  as  you  surf,  post  to 
newsgroups,  and  send  e-mail  (see  "The  eyes  of  Richard  Smith,"  link  below). 
But  as  soon  as  you  hand  over  your  credit  card  to  pay  for  a  book  or  a  vacation, 
your  anonymity  is  gone. 
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In  fact,  the  biggest  threat  to  your  privacy  today  isn't  crackers,  stalkers,  or  data    ARTS  &  S"n 
brokers.  It's  the  legitimate  online  businesses  —  such  as  advertising  networks, 
retailers,  and  others  —  that  are  creating  detailed  profiles  of  who  you  are  and 
what  you  do  when  you  are  on  the  Web. 
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Profiles  in  commerce 


1°  (MORE  HI 


Consumer  profiling  isn't  new.  For  years,  mail-order  firms  have  been  tracking 
the  products  you  buy  so  that  they  can  send  you  catalogs  specific  to  your 
interests.  Shopping  club  cards  allow  supermarket  chains  to  keep  detailed 
records  of  the  groceries  you  purchase.  And  special-interest  magazines 
regularly  sell  lists  of  subscribers  to  third-party  marketers. 

While  the  practice  of  profiling  is  widespread  in  the  offline  world,  its  scope 
was  limited  until  now  because  mail-order  firms  weren't  able  to  easily  pool 
their  data  —  say,  to  combine  records  of  your  supermarket  purchases  with  a  list 
of  your  magazine  subscriptions.  But  on  the  Net,  it's  fairly  simple  to  create  a 
record  of  every  site  you  visit  and  every  transaction  you  make.  As  a  result, 
Web  profiles  can  contain  an  unprecedented  amount  of  information  about  your 
interests  and  activities. 

"Say  you  go  to  a  book  site,"  says  Evan  Hendricks,  editor  and  publisher  of  the 
Privacy  Times  newsletter  in  Washington,  DC.  "[Profilers]  can  see  what  you 
looked  at  and  what  you  bought.  Do  those  books  reflect  political  opinions, 
sexual  preference,  [or]  health  conditions?" 
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Critics  paint  a  range  of  dark  scenarios  if  Web  profiles  were  ever  to  become 
available  for  sale  on  the  open  market.  Corporations,  for  instance,  could  use 
profiles  to  screen  out  job  applicants  based  on  health  advice  they  may  have 
sought  on  the  Web.  Say  an  applicant  filled  out  a  health  self-assessment  form 
on  a  medical  advice  site  and  listed  a  family  history  of  colon  cancer. 
Conceivably,  the  site  or  its  partners  could  market  that  information  to 
employers.  Or  say  the  applicant  bought  medicine  at  a  site  like  Drugstore.com 
or  posted  messages  to  an  HIV  chat  group.  All  this  information  could  be  added 
to  the  user's  profile,  and  employers  could  lower  their  insurance  premiums  by 
not  hiring  employees  who  could  potentially  have  serious  illnesses.  "Those 
kinds  of  economic  decisions  can  and  will  be  made,"  says  Fred  Druseikis, 
chief  architect  for  HealthMagic,  a  Winter  Park,  Florida,  company  that 
provides  secure  systems  for  sharing  medical  records  over  the  Internet. 

"In  terms  of  how  information  is  collected  and  used  on  the  Internet,"  says 
Marc  Rotenberg,  executive  director  of  the  Electronic  Privacy  Information 
Center  (EPIC)  in  Washington,  D.C.,  "to  allow  detailed  secret  profiles  to  be 
created  is  disastrous." 

Theoretically,  such  profiles  could  also  become  subject  to  subpoena  or  be 
hijacked  by  an  unscrupulous  company  or  individual.  "In  a  divorce  or  child 
custody  case,  your  spouse  could  use  your  surfing  habits  against  you,"  says 
Larry  Sontag,  a  Seattle-based  privacy  consultant  and  author  of  It's  None  of 
Your  Business  (PMI  Enterprises,  2000).  "This  information  could  be  available 
to  hackers,  employees  of  a  company  who  may  be  having  a  bad  hair  day,  or 
any  crook  with  access  to  the  Internet,"  Sontag  adds.  "The  lack  of  privacy 
means  that  [this  data]  is  available  to  both  honest  and  dishonest  people." 

Double  trouble 

The  biggest  profilers  on  the  Internet  are  companies  whose  sites  you  may 
never  have  visited  -  networks  like  DoubleClick  and  Engage  Technologies, 
which  deliver  banner  ads  to  thousands  of  Web  pages  and  may  collect 
information  about  you  without  your  knowledge. 

These  firms  use  tracking  cookies  to  determine  which  banner  ads  you  see 
when  you  access  a  Web  page.  Here's  how  it  works:  The  first  time  you  view  a 
page  with  a  DoubleClick  banner  ad  on  it,  the  ad  deposits  a  cookie  on  your 
hard  disk.  Then  any  time  you  view  another  page  containing  a  DoubleClick 
ad,  the  cookie  on  your  hard  drive  sends  the  URL  of  that  page  back  to  the  ad 
agency's  server;  thus  begins  a  detailed  clickstream  -  a  history  of  some  of  the 
places  you've  visited  on  the  Net.  Currently,  this  clickstream  isn't  matched  to 
your  individual  identity.  Instead,  each  cookie  contains  a  globally  unique 
identifier  (GUID),  which  lets  the  ad  server  track  your  movements  without 
identifying  your  actual  name  or  e-mail  address. 

In  this  way,  DoubleClick  has  amassed  information  on  the  surfing  habits  of 
100  million  users,  while  Engage  boasts  a  database  of  52  million  profiles. 

Last  fall,  however,  DoubleClick  quietly  revealed  that  it  planned  to  link  the 
names  of  surfers,  their  e-mail  addresses,  and  other  personal  information  about 
them  to  their  clickstreams.  The  New  York-based  company  said  that  it  would 
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combine  these  profiles  with  additional  data  about  the  purchasing  histories 
and  habits  of  some  88  million  U.S.  households.  DoubleClick  obtained  this 
data  when  it  bought  the  offline  market  research  firm  Abacus  Direct  last 
November. 

According  to  senior  vice  president  Jonathon  Shapiro,  DoubleClick's  intention 
was  merely  to  target  ads  to  specific  users.  "The  whole  goal  here  is  to  make 
advertising  work  by  getting  the  right  message  to  the  right  user  at  the  right 
time,"  he  says. 

But  the  reaction  from  consumers  and  privacy  advocates  was  swift  and 
vociferous.  EPIC  filed  a  complaint  with  the  Federal  Trade  Commission, 
alleging  that  DoubleClick  was  "engaging  in  unfair  and  deceptive  trade 
practices  by  tracking  the  online  activities  of  Internet  users."  The  FTC  and 
attorneys  general  in  New  York  and  Michigan  initiated  inquiries  into  the 
company's  practices,  and  as  we  went  to  press  DoubleClick  had  been  named  in 
six  civil  suits  for  alleged  privacy  breaches. 

In  response  to  the  backlash,  the  company  suspended  its  plans  to  merge 
profiles  with  personally  identifiable  information.  In  a  statement  appearing  on 
DoubleClick's  Web  site  last  March,  CEO  Kevin  O'Connor  admitted  that  he 
had  "made  a  mistake"  in  attempting  to  identify  users.  He  also  vowed  that 
"until  there  is  agreement  between  government  and  industry  on  privacy 
standards,  we  will  not  link  personally  identifiable  information  to  anonymous 
user  activity  across  Web  sites." 

But  privacy  advocates  warn  that  DoubleClick's  change  of  plans  is  just  a 
temporary  reprieve.  "I  think  you  have  to  read  the  language  of  DoubleClick's 
reversal  very  carefully,"  says  Robert  Ellis  Smith,  publisher  of  Privacy 
Journal  in  Providence,  Rhode  Island.  "They  have  simply  agreed  to  defer  their 
plans  until  the  heat's  gone.  The  company  did  not  agree  to  cease  combining 
online  and  offline  information  in  the  foreseeable  future  [or]  say  that  it  is  an 
unfair  marketing  technique." 

Are  you  being  followed? 

DoubleClick  and  RealNetworks  are  not  the  only  sites  accused  of  tracking 
users'  activities  across  the  Web.  Amazon.com  is  embroiled  in  a  similar 
controversy  involving  Alexa  Internet,  a  San  Francisco-based  software  firm 
that  the  e-tailing  giant  purchased  in  June  1999.  Amazon  plans  to  use  Alexa's 
software  in  its  ZBubbles  shopping  service.  The  free  software's  menu  bar  sits 
on  top  of  your  browser  as  you  surf,  suggesting  similar  sites  to  visit  and  letting 
you  share  information  with  other  shoppers.  But  it  also  captures  the  Web 
address  of  each  page  you  view—and  according  to  security  expert  Richard 
Smith  (see  "The  eyes  of  Richard  Smith,"  link  below),  these  URLs  can  contain 
a  wide  variety  of  personally  identifying  information. 

For  example,  when  you  use  a  search  engine  like  AltaVista,  the  URL  for  the 
results  page  contains  a  text  string  including  the  terms  you  searched  for. 
Depending  on  how  the  Web  site's  search  engine  works,  a  URL  could  contain 
your  name  or  e-mail  address,  too,  as  well  as  the  titles  of  books  you  may  have 
bought,  flights  you  may  have  booked,  and  health  conditions  you  may  have 
researched  -  all  of  which,  Smith  says,  get  sent  up  the  wire  to  Alexa.  (Smith 
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uncovered  a  similar  problem  having  to  do  with  DoubleClick  cookies.  A 
recent  example  involved  Intuit,  whose  Quicken  Web  site  was  inadvertently 
forwarding  users'  financial  information  to  DoubleClick.  Intuit  quickly 
plugged  the  leak,  and  DoubleClick  says  it  didn't  store  this  information;  but 
DoubleClick  did  not  provide  details  of  what  exactly  is  stored  in  its  profiles.) 
At  press  time  the  FTC  had  opened  a  formal  inquiry  into  Alexa's  information 
gathering  practices,  and  the  company  has  been  named  in  three  consumer 
lawsuits. 

According  to  Dia  Cheney,  director  of  corporate  communications  for  Alexa, 
the  company  stores  its  users'  Web  trails  anonymously  and  keeps  this  data 
separate  from  personally  identifiable  information,  such  as  e-mail  addresses, 
that  users  may  have  provided  when  they  registered  the  software.  She  would 
not  comment  on  Smith's  allegations,  saying  they  were  part  of  the  FTC 
inquiry.  "We  are  cooperating  fully  with  the  informal  FTC  investigation  on  a 
voluntary  basis,"  she  says.  "Historically,  Alexa  has  always  been  concerned 
with  protecting  consumer  privacy." 

Policies  are  no  insurance 

So  far,  most  of  the  attention  has  been  focused  on  getting  sites  to  post  privacy 
policies  that  state  what  information  they  collect  and  what  they  do  with  it.  But 
both  RealNetworks  and  Alexa  have  been  accused  of  violating  their  own 
policies  about  keeping  user  information  anonymous.  If  such  claims  are  true, 
the  sites  could  be  held  liable  for  committing  fraud,  says  Professor  Gerald 
Ferrera,  who  teaches  a  course  in  cyberlaw  at  Bentley  College  in  Waltham, 
Massachusetts. 

"Promises  made  in  the  privacy  policy  are  as  much  a  part  of  the  transaction  as 
what  is  delivered  to  the  consumer,"  Ferrera  says.  If  a  company  fails  to 
observe  its  policy,  it  can  be  sued  under  the  federal  Consumer  Fraud  and 
Abuse  Act,  as  well  as  various  common  laws  and  state  and  federal  consumer 
protection  statutes. 

But  policy  breaches  may  be  more  common  than  most  people  realize.  A  study 
of  21  health  advice  sites  coauthored  by  Richard  Smith  and  sponsored  by  the 
California  Healthcare  Foundation  found  that  many  sites  share  sensitive 
information,  despite  privacy  policies  against  the  practice.  The  study, 
published  in  January  of  this  year,  looked  at  health-specific  entities  such  as 
AllHealth  and  WebMD,  as  well  as  high-traffic  portals  like  AltaVista,  Excite, 
and  Yahoo.  Its  key  finding: 

"On  a  number  of  sites  personally  identified  information  is  collected  through 
the  use  of  cookies  and  banner  advertisements  by  third  parties  without  the  host 
sites  disclosing  this  practice.  There  are  also  instances  where  personally 
identified  data  is  transferred  to  third  parties  in  direct  violation  of  stated 
privacy  policies." 

For  example,  the  report  states  that  some  sites  provide  health  assessment  tests. 
For  six  of  these  sites  (OnHealth,  AllHealth,  CVS,  Yahoo,  HealthCentral,  and 
InteliHealth),  the  tests  are  actually  conducted  by  a  third-party  firm,  a  fact  that 
is  not  made  clear  to  visitors.  Third-party  firms  that  collect  the  data  (including 
personally  identifying  information)  are  often  not  covered  by  the  host  site's 
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privacy  policy;  so,  theoretically,  these  third  parties  could  sell  your  health 
information  to  marketers,  insurers,  or  potential  employers.  In  other  cases,  the 
report  found  that  sensitive  data  such  as  e-mail  addresses  was  inadvertently 
embedded  in  the  URLs  that  were  being  sent  to  advertisers  and  ad  networks. 

In  short,  Internet  privacy  policies  offer  consumers  very  little  protection.  "Six 
months  ago,  just  having  a  privacy  policy  was  considered  pretty  honorable," 
says  Abner  Germanow,  a  research  manager  at  International  Data  Corporation 
in  Framingham,  Massachusetts.  "Today,  most  policies  are  pretty  worthless." 

A  Georgetown  University  study,  published  in  June  1999,  examined  361 
commercial  Web  sites  and  found  that  nine  out  of  ten  ask  you  to  supply  at 
least  one  piece  of  personal  information,  such  as  your  name,  e-mail  address,  or 
postal  address.  But  only  two-thirds  of  the  sites  in  the  survey  offered  privacy 
statements.  And  less  than  ten  percent  had  what  researchers  considered  a 
complete  policy  —  one  that  provides  consumers  with  a  statement  about  the 
site's  data  collection  practices,  an  opt-out  clause,  access  to  the  information 
collected,  a  description  of  how  the  site  secures  data,  and  phone  numbers  or  e- 
mail  addresses  that  consumers  can  use  to  contact  the  company.  What's  more, 
privacy  statements  can  be  changed  at  will,  often  without  notification  to  users 
or  affiliated  sites.  EPIC's  complaint  to  the  FTC  notes  that  DoubleClick 
changed  its  policy  three  times  in  the  past  three  years. 

"If  you  want  to  find  out  how  a  company  feels  about  your  personal  privacy, 
don't  look  at  their  privacy  statement,  look  at  their  business  model,"  says  Rick 
Jackson,  CEO  of  Privada,  a  San  Jose,  CaliforniaDbased  maker  of  products 
that  allow  consumers  to  surf  the  Web  anonymously.  A  former  executive  at 
Net  Gravity,  Jackson  helped  engineer  that  marketing  firm's  merger  with 
DoubleClick  last  October,  despite  personal  reservations  about  some  of 
Doubleclick's  marketing  methods.  The  more  an  information-gathering 
company  knows  about  you,  he  says,  the  more  money  it  makes:  "That's  their 
business  model.  If  it's  a  question  of  profit  versus  privacy,  profits  come  first 
every  time." 

Legal  remedies 

Until  now  the  federal  government  has  adopted  a  hands-off  approach  to 
Internet  privacy  -  watching  and  waiting  for  the  Web  industry  to  regulate 
itself.  Organizations  like  Truste  still  say  that  this  is  the  right  course  to  take. 
Truste,  based  in  Cupertino,  California,  oversees  privacy  policies  for  more 
than  1300  Web  sites,  including  those  belonging  to  RealNetworks  and 
Amazon.com's  Alexa.  According  to  Bob  Lewin,  CEO  of  Truste, 
RealNetworks'  response  to  allegations  of  privacy  abuses  demonstrates  that 
self-regulation  works. 

Lewin  says  that  Truste  convinced  RealNetworks  to  issue  a  patch  that  prevents 
its  software  from  assigning  a  unique  identification  number  to  each  user. 
Truste  also  persuaded  the  company  executives  to  appoint  a  chief  privacy 
officer  and  to  release  RealPlayer  7.0  using  an  opt-in  model,  so  that  consumers 
must  actively  choose  to  create  a  unique  ID  number,  rather  than  the  more 
common  opt-out  model  used  by  the  majority  of  Web  sites.  "We  did  all  of  that 
in  the  space  of  one  week,"  Lewin  says.  "You  show  me  any  government  body 
that  moves  that  fast." 
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Unfortunately,  Truste's  influence  is  limited  to  its  licensees,  which  don't 
include  such  Internet  heavyweights  as  Amazon.com  and  DoubleClick  (see 
"Should  you  trust  Truste?"  link  below).  And  while  Truste  does  perform 
quarterly  audits  of  its  members'  Web  sites  to  ensure  that  the  stated  privacy 
policy  on  the  site  matches  the  member's  practices,  the  organization  does  not 
specify  what  kinds  of  information  members  can  collect,  nor  what  they  can  do 
with  that  information  once  they  have  it.  "The  problem  with  self-regulation  is 
that  it  rewards  bad  actors,"  says  EPIC's  Rotenberg.  Once  a  Web  site  begins 
generating  revenue  by  selling  user  profiles  and  personal  information,  he 
explains,  other  Web  sites  will  have  to  follow  suit  in  order  to  remain 
competitive. 

"There's  no  way  any  number  of  companies  will  be  able  to  protect  human 
rights  through  a  business  model,"  says  Privacy  Times  publisher  Evan 
Hendricks.  "When  things  go  wrong,  people  need  a  [legal]  remedy.  Right  now 
we  don't  have  that." 

Although  several  states  have  already  enacted  their  own  privacy  statutes,  there 
is  no  comprehensive  federal  law  governing  personal  privacy.  But  the 
situation  may  change  this  year.  Congress  is  currently  debating  a  dozen  bills 
designed  to  regulate  different  types  of  personal  data,  from  medical  records  to 
financial  matters. 

Senator  Robert  Toricelli  (D-New  Jersey)  recently  introduced  a  bill  that  would 
require  Web  sites  to  obtain  users'  permission  before  installing  devices  such  as 
cookies  that  track  their  movements  on  the  Internet.  And  last  February, 
Senators  Richard  Shelby  (R-Alabama)  and  Richard  Bryan  (D-Nevada) 
banded  together  with  Representatives  Edward  Markey  (D-Massachusetts)  and 
Joe  Barton  (R-Texas)  to  form  the  Congressional  Privacy  Caucus.  This 
bipartisan  group  is  expected  to  draft  new  privacy  legislation  that  will  be 
based  on  the  principles  of  user  notification,  consent,  and  access. 

Privacy  wonks,  however,  are  skeptical  of  what  the  federal  government  may 
cook  up.  "I  think  the  best  place  for  legislation  in  some  ways  is  at  the  local  or 
state  level,"  says  Tom  Maddox,  editor  ofPrivacyPlace.com,  a  Berkeley, 
California,  site  specializing  in  privacy  issues.  "Federal  laws  tend  to  be  big, 
fat,  unwieldy...  sledgehammers  swatting  at  gnats.  They  usually  miss  the  gnat 
and  hit  the  rest  of  us." 

Technology  to  the  rescue 

You  can  opt  out  of  DoubleClick  profiles.  You  can  avoid  using  software  that 
follows  your  footsteps  on  the  Internet.  You  can  crumble  every  cookie  before 
your  browser  takes  a  nibble  from  it.  And  still  you  are  at  risk  from  the  next 
site,  the  next  advertiser,  the  next  marketer  who  sees  dollar  signs  in  your  data. 

One  thing  is  certain:  Online  data  gathering  will  not  go  away.  Too  many  Web 
sites  are  depending  on  the  revenues  from  selling  user  data  or  delivering 
specific  demographics  to  advertisers.  The  question  is  whether  you'll  have  any 
say  in  what  happens  to  your  information. 

"The  real  issue  is,  who's  in  control  of  my  online  profile,  who  can  access  it, 
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and  who's  selling  it?"  says  Germanow.  "When  I  show  up  at  a  travel  site,  do  I 
want  them  to  know  who  I  am  and  what  frequent  flyer  program  I  belong  to? 
Yes.  When  I'm  doing  research  on  AIDS  because  I  have  a  friend  in  the 
hospital,  do  I  want  that  as  part  of  my  profile?  I  don't  think  so." 

Today,  even  vendors  who  sell  products  for  protecting  anonymity  admit  that 
there  is  no  easy  solution  for  e-commerce.  Programs  like  PrivadaProxy  and 
Zero-Knowledge's  Freedom  can  protect  your  identity  while  you  browse,  chat, 
or  send  e-mail,  but  according  to  Privada's  Jackson,  "As  soon  as  you  decide 
you  want  to  buy  something,  you're  left  unprotected." 

Both  companies  say  they  are  working  on  schemes  to  allow  consumers  to  shop 
anonymously  and  expect  to  introduce  products  within  a  year.  Zero- 
Knowledge's  Austin  Hill  sees  a  future  in  which  shopping  agent  software  can 
assure  a  Web  site  that  you  have  the  credentials  to  make  a  purchase,  then 
negotiate  what  data  you  are  willing  to  give  up  in  return  for  a  good  price. 

"What  if  you  had  the  most  accurate  version  of  your  profile  under  your  lock 
and  key?"  asks  Hill,  president  of  the  Montreal  firm.  "Your  credit  information, 
EBay  reputation,  frequent  flyer  miles,  how  much  shopping  you  do.  You'd  be 
able  to  leverage  that  data,  build  relationships  with  merchants,  and  still 
maintain  your  privacy." 

Hill  believes  that  consumers  need  to  start  thinking  about  Internet  privacy  the 
same  way  they  think  about  viruses.  "You  don't  use  a  computer  unless  you 
have  antivirus  software,"  he  says,  "and  you  shouldn't  give  away  data  without 
protecting  yourself.  Every  time  you  fill  in  a  Web  form  or  a  registration  card, 
make  sure  that  the  data  is  100  percent  necessary  for  completing  the 
transaction,  and  that  the  company  will  protect  it."  When  enough  consumers 
refuse  to  give  away  their  personal  information  for  free,  he  adds,  merchants 
will  have  to  respond. 

"You  have  to  be  a  kind  of  Jeffersonian  citizen  for  the  Web,"  agrees  Maddox. 
"Be  aware,  be  educated,  take  personal  action.  If  you're  just  a  passive 
consumer,  they  will  drive  right  over  you." 
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Spies  Among  Us 


O.K.,  maybe  it  does  sound  a  little  paranoid.  But  last 
year  over  the  Christmas  holidays,  Richard  Smith,  a 
Brookline,  Mass.,  software  entrepreneur  and 
freelance  computer  investigator,  became  convinced 
his  computer  was  spying  on  him.  It  began  after 
Smith  had  downloaded  onto  his  laptop  a  nifty 
program  he  found  called  zBubbles,  which  is 
supposed  to  help  people  shop  online.  A  product  of 
Amazon  subsidiary  Alexa,  zBubbles  does  some 
helpful  things.  When  you're  surfing  e-commerce 
websites,  it  pops  up  and  offers  recommendations 
about  products.  And  just  like  a  good  shopping  pal,  it 
even  gives  you  comparative  shopping  advice  about 
where  you  may  be  able  to  get  a  specific  item 
cheaper. 

There's  a  dark  side  to  the  program,  though,  that  isn't 
nearly  so  friendly.  While  browsing  an  Internet-privacy 
newsgroup,  Smith  came  across  a  posting  from  a 
zBubbles  user  who  suspected  it  was  snooping  on 
him.  The  program  supposedly  monitored  what  users 
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Intrigued  by  the  report,  Smith,  who  played  a  major 
role  in  tracking  down  the  creator  of  last  year's 
Melissa  virus,  decided  to  investigate.  Working  out  of 
his  third-floor  home  office,  he  ran  a  little  experiment. 
He  fired  up  zBubbles  and  began  surfing  the  Net;  at 
the  same  time,  he  launched  a  program  called  a 
"packet  sniffer,"  which  examined  the  transmissions 
that  were  leaving  his  computer  and  going  back  over 
the  Internet.  He  found  they  contained  all  kinds  of 
information  about  him  that  zBubbles  had  culled  as  it 
trailed  him  online.  What  was  in  there?  His  home 
address,  for  one  thing.  It  also  sent  back  the  titles  of 
the  DVDs  he  was  considering  buying  on  Buy.com. 
His  computer  was  even  relaying  information  about 
an  airline  flight  he  had  booked  for  his  14-year-old 
daughter.  "It  was  creepy,"  says  Smith. 

zBubbles  has  good  reason  for  sending  some  of  that 
information  back  to  Alexa.  To  help  with  e-shopping,  it 
has  to  know  the  sites  a  user  visits  and  the  products 
he  sees  there.  But  zBubbles  apparently  spies  even 
when  users  aren't  shopping:  Smith  was  just  double- 
checking  his  daughter's  plane  reservation  when 
zBubbles  grabbed  the  flight  number  and  sent  it 
home.  "They're  getting  too  much  information," 
concludes  Smith.  "They  design  the  product  always  to 
be  installed  on  the  screen,  even  though  most  of  us 
aren't  shopping  all  the  time." 

Officials  from  zBubbles  declined  to  comment,  since 
a  complaint  was  filed  by  Smith  with  the  Federal 
Trade  Commission.  A  company-privacy  statement 
online,  however,  insists  zBubbles  doesn't  correlate 
any  information  it  collects  with  individual  users.  While 
that  might  appear  to  lessen  privacy  concerns,  Smith 
and  others  are  concerned  the  information  could  be 
matched  up  with  individuals  if  the  company  is  sold  — 
or  if  it  changes  its  mind.  In  fact,  the  zBubbles  usage 
agreement  cautions  that  its  privacy  policy  "may  be 
changed  by  us  in  the  future."  Users,  it  adds,  should 
"check  the  zBubbles  privacy  policy  frequently  for 
changes." 
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It's  hardly  a  shock  these  days  to  learn  that  surfing 
the  Internet  isn't  a  private  experience.  Internet- 
service  providers  have  the  ability  to  keep  track  of  the 
sites  you  visit  and  the  software  you  download. 
Websites  use  cookies  —  bits  of  data  that  can  be 
stored  on  your  PC  —  to  keep  a  record  of  visitors. 
And  the  Doubleclick  dustup  earlier  this  year  was  a 
reminder  of  just  how  easy  it  is  for  companies  to  link 
the  cookies  you  got  by  visiting  different  websites  with 
off-line  information  about  you  to  assemble  a  chillingly 
complete  dossier,  including  everything  from  where 
you  work  to  what  kind  of  books  and  movies  you  like 
to  buy  (See  Cookie  article.). 

But  zBubbles  is  part  of  a  new  wave  of  privacy 
incursions  that  take  Internet  snooping  to  a  new  level: 
software  that  commandeers  your  computer  to  spy  on 
you.  This  software  plants  itself  in  the  depths  of  your 
hard  drive  and,  from  that  convenient  vantage  point, 
starts  digging  up  information.  Often  it's  watching 
what  you  do  on  the  Internet.  Sometimes  it's  keeping 
track  of  whether  you  click  on  ads  in  software,  even 
when  you're  not  hooked  up  to  the  Internet.  In 
Netspeak  these  programs  are  known  as  E.T. 
applications  because  after  they  have  lodged  in  your 
computer  and  learned  what  they  want  to  know,  they 
do  what  Steven  Spielberg's  extraterrestrial  did: 
phone  home. 

That  may  be  the  most  paranoia-inducing  part.  E.T. 
applications  use  your  Internet  connection  to  deliver 
espionage  briefings  on  you,  often  without  your 
realizing  it's  happening.  "If  you're  connected  to  the 
Net,  it's  easy  for  these  applications  to  send  a  packet 
back,"  says  William  Cheswick,  chief  scientist  at 
Lucent  Technologies'  new  Internet-security  venture. 
"It's  one  additional  flash  of  the  modem  light.  Who 
would  even  notice?"  In  fact,  some  E.T.  applications 
have  been  uncovered  precisely  this  way.  People 
glance  over  at  their  computer  and  have  a  Sixth 
Sense  moment:  their  modem  light  is  flashing, 
indicating  that  information  is  being  sent  over  their 
Internet  connection,  even  when  no  one  is  seated  at 
the  computer. 


Introduction 

Are  you 
paranoid9  You 
might  be  one  of 
20  million  people 
who  should  be. 

Watch  Out 
Four  E.T. 
companies  and 
their  software 

The  Cookie 
Trackers 

Avoiding  cookies 
is  easy,  but  they 
may  not  be  the 
real  threat 

Hiding  Your 
Secrets 

Encryption 
programs  are  a 
great  way  to 
preserve  privacy 

Poll: 

Have  privacy 

concerns  ever 

kept  you  from 

using  an  online 

service? 

Killing  Cookies 
Find  out  how  the 
cookie  crumbles. 

Privacy  Sites 
Psst!  Can  you 
keep  a  secret? 


http://www.time.com/time/digital/reports/paranoia/index3.html 


6/14/00 


TIME  Digital  --  Special  Report:  Privacy 


Page  2  of  2 


Summer  Living 

Summer  Reading  List 
Music  for  the  road  &  beach 

Quick  Links 

Find  JFK  Jr. 
Commemorative 
Find  books 
Find  videos 
Find  music 

Free  Product  Information 


Makers  of  E.T.  applications  say  the  privacy  concerns 
are  overblown.  Most  say  that  even  if  they  are  able  to 
collect  data  about  computer  users,  they  don't 
connect  them  to  individuals.  Yes,  they  may  have  the 
capability  to  learn  —  even  without  your  knowledge 
that  you  are  visiting  porno  sites  or  HIV  Web  pages. 
But,  they  say,  they'll  never  connect  any  of  that  to  you 
by  name.  Those  promises  don't  assuage  many 
privacy  advocates,  who  say  the  data  have  the 
potential  to  be  misused  and,  given  the  commercial 
value  of  individualized  data,  companies  that  collect 
them  could  change  their  policies  at  any  time. 


The  stakes  are  ratcheting  up  quickly  as  we  enter  the 
coming  wireless,  portable-computer  age.  Before  long 
our  computers  will  probably  be  high-performance, 
handheld  devices  that  know  our  physical  location  at 
all  times  and  serve  as  our  primary  means  of  making 
purchases.  If  these  pocket-size  PCs  have  spies 
inside  them,  the  capacity  to  monitor  our  lives  will  be 
virtually  unlimited. 
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E.T.  applications  take  advantage  of  a  simple  fact  of 
Internet  life:  when  we  download  software,  most  of  us 
have  no  way  of  knowing  what  we're  getting.  We  have 
to  rely  on  the  word  of  the  company  providing  it  — 
and  of  the  software  writer  —  that  it  does  what  it  says 
it  does  and  nothing  else.  "Any  piece  of  software  you 
download  from  the  Internet  is  potentially  a  Trojan 
horse,"  warns  David  Kristol,  a  member  of  the 
technical  staff  at  Lucent  Technologies'  Bell  Labs. 
"You  have  no  way  of  knowing  what  it's  going  to  do." 

That's  what  makes  it  so  easy  to  spread  computer 
viruses  like  Melissa,  which  traveled  across  the 
Internet  in  e-mail,  embedded  in  innocuous-looking 
Word  documents.  It's  what  makes  fraud  so  easy  on 
the  Net.  A  few  years  ago,  the  so-called  Moldova 
scam  lured  users  to  free  porno  sites  with  such 
names  as  www.waysexygirls.com.  When  anyone 
downloaded  a  program  that  was  necessary  to  see 
the  way-sexy  girls,  it  included  Trojan-horse  software, 
which  unbeknownst  to  the  user,  hijacked  the 
computer  modem  so  that  it  dialed  a  phone  number  in 
the  small  East  European  nation  of  Moldova,  charging 
the  victim's  phone  bill  at  the  rate  of  $3  a  minute. 

E.T.  applications  aren't  quite  that  sinister.  But  they 
often  spirit  away  personal  information  users  would 
be  appalled  to  know  was  being  shared.  "People  may 
get  a  box  to  check,  but  they  have  no  idea  they're 
downloading  tiny  little  spies  that  will  report  back  on 
them,"  says  Robert  Ellis  Smith,  publisher  of  the 
Privacy  Journal.  "Most  people  don't  even  know  that 
can  be  done." 

Take  the  case  of  SurfMonkey,  which  is  supposed  to 
protect  kids  surfing  the  Web.  The  program  blocks 
questionable  language  and  prevents  children  from 
accessing  inappropriate  Web  pages.  But,  according 
to  Richard  Smith,  it  also  sends  home  information, 
including  a  user's  personal  ID,  phone  number  and  e- 
mail  address.  That's  hardly  privacy-friendly,  says 
Smith. 

SurfMonkey  says  it  doesn't  use  the  IDs  to  collect 
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data  on  individuals;  they're  used  to  evaluate  the 
appropriateness  of  websites  for  children.  Any 
personal  information  that  is  gathered,  the  company 
says,  is  otherwise  "ignored."  In  any  case,  the 
company  plans  to  change  its  software  in  the  next 
month  to  stop  sending  ID  data  to  its  server. 

The  roots  of  E.T.  applications  go  back  to  a  surprising 
place:  Microsoft.  When  Windows  95  came  out,  it 
included  a  program  called  Registration  Wizard, 
which  let  purchasers  dispense  with  snail  mail  and 
register  their  Windows  95  software  over  the  Internet. 
But  it  did  something  else  too:  it  poked  around  on  the 
purchaser's  hard  drive,  making  a  list  of  other 
installed  software  —  and  sent  the  information  back 
to  Microsoft.  Although  Microsoft  asked  users  for 
permission,  it  still  caused  an  uproar.  Critics 
contended  that  Bill  Gates  &  Co.  were  snooping  for 
commercial  advantage:  they  charged  that  Microsoft 
wanted  the  data  so  that  it  could  e-mail  WordPerfect 
users  to  try  to  get  them  to  switch  to  Microsoft's 
Word.  Eventually  the  uproar  died  down,  and 
Microsoft  kept  Registration  Wizard  just  as  it  was. 
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In  the  five  years  since  the  Windows  95  rollout,  E.T. 
applications  have  proliferated.  More  than  22  million 
people  are  believed  to  have  downloaded  them.  The 
real  driving  force  is  that  in  the  mad  race  for  eyeballs 
and  click-throughs  on  the  Internet,  information  about 
who  you  are,  where  you  live  and  what  your  surfing 
and  buying  patterns  are  is  becoming  increasingly 
valuable.  "These  days  grabbing  personal  data  is 
often  seen  as  a  surrogate  for  value  by  venture 
capitalists  and  Wall  Street,"  says  Jason  Catlett, 
president  of  Junkbusters  Corp.,  a  privacy  website. 

There  are  hundreds  of  E.T.  applications  out  there. 
Among  the  most  popular:  PKZip,  shareware  for 
compressing,  storing  and  archiving  files,  and 
CuteFTP.,  widely  used  by  the  MP3  crowd  to  fetch 
music  files.  (Conducent,  the  company  that  embeds 
ads  in  PKZip  and  the  current  version  of  CuteFTP, 
says  it  sorts  ad-view  data  only  demographically  and 
collects  no  personally  identifiable  information.)  But 
even  computer  experts  have  trouble  spotting  E.T. 
programs.  In  some  cases,  they've  come  to  light  only 
when  tech-savvy  Internet-privacy  advocates  have 
picked  apart  the  data  streams  moving  in  and  out  of 
their  computers.  That's  how  Smith  blew  the  whistle 
on  RealNetworks  last  fall. 

RealNetworks  makes  the  popular  RealJukebox 
software,  which  lets  users  transfer  music  from  the 
Net  and  their  CDs  to  their  hard  drive  so  it  can  play  on 
their  computer.  Smith  noticed  that  when  he  put  a  CD 
in  his  computer,  his  music  choice  and  his  machine's 
unique  identifier  were  sent  back  to  RealNetworks. 
Since  Smith  had  given  RealNetworks  his  name  and 
other  identifying  information  when  he  registered  his 
RealJukebox  software,  RealNetworks  would  be  able 
to  compile  a  database  on  what  kind  of  music  he  was 
listening  to.  Under  a  fire  storm  of  criticism, 
RealNetworks,  which  maintained  it  had  no  plans  to 
correlate  users'  names  with  their  musical  tastes, 
nevertheless  disabled  its  E.T.  applications. 

The  most  recent  company  to  feel  the  heat  over  E.T. 
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applications  is  Radiate,  formerly  known  as  Aureate. 
Radiate  is  an  advertising  company  that  works  with 
the  makers  of  shareware  —  software  that  can  be 
downloaded  free  from  the  Internet.  Shareware 
writers  have  long  tried  to  support  themselves  by 
asking  people  who  download  their  product  to  make 
voluntary  payments.  The  problem  was,  few  users 
paid  up.  Radiate's  solution:  placing  ads  on 
shareware.  But  these  days  the  real  money  is  in 
targeted  ads  that  change  to  something  else  after 
they  have  been  viewed  once  or  that  are  matched  to 
the  interests  and  demographics  of  particular  viewers. 
Radiate's  ads<placed  on  such  popular  shareware  as 
Golzilla  and  Free  Solitaire  —  came  with  ET. 
software  that  embedded  itself  in  18  million  people's 
computers  and  used  their  Internet  connection  to 
report  back  on  what  ads  people  were  clicking  on. 


Internet-privacy  advocates  were  furious.  They 
argued  that  tracking  the  ads  someone  clicks  on  is 
inherently  invasive.  Computer  users  may  not  want  it 
known  that  they're  clicking  on  ads  for,  say,  cancer 
drugs  or  pornography.  A  worst-case  scenario:  this 
kind  of  sensitive  information,  gleaned  from  a 
computer  user's  home  Internet  surfing,  could  make 
its  way  to  the  person's  employer. 

Worst  of  all,  the  original  version  of  Radiate's 
software,  which  still  resides  in  countless  computers, 
was  written  to  keep  phoning  home  even  after  the 
shareware  that  put  it  there  was  deleted.  In  other 
words,  even  after  you  uninstall  its  shareware  version 
of  solitaire,  your  computer  could  keep  reporting  back 
on  you.  Users  needed  a  special  tool  to  delete  the  file, 
which  the  company  provided  on  its  website  only 
later,  after  an  outcry  from  privacy  advocates. 

Radiate  insists  it  did  nothing  wrong.  It  says  it  never 
identified  individual  users  who  went  to  particular 
sites.  "The  information  is  anonymous,"  says 
spokesman  Peter  Fuller.  "All  we  would  know  is  that 
user  XYZ123  clicked  on  an  ad."  And,  Fuller  says,  no 
specific  information  about  users  was  passed  on  to 
advertisers.  Still,  Radiate  had  the  capacity  to  learn 
and  share  this  information  had  it  so  wished. 
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One  of  the  most  insidious  things  about  E.T. 
applications  is  that  most  computer  users  have  no 
idea  these  invaders  are  in  their  computers.  Steve 
Gibson,  a  computer  consultant  from  Irvine,  Calif., 
learned  he  had  an  E.T.  application  on  his  computer 
only  when  he  was  running  Zone  Alarm,  an  Internet- 
fire  wall  application.  It  listed  applications  on  his 
computer  that  he  knew  were  in  contact  with  the 
Internet,  such  as  his  Internet  Explorer  browser  and 
his  Eudora  e-mail.  Then  it  asked  him  about  one  he'd 
never  heard  of:  tsadbot.exe,  which  turned  out  to  be 
an  E.T.  application  he  had  unwittingly  let  into  his 
computer  a  month  earlier  while  downloading  some 
shareware. 

What  can  the  average  computer  user  do  to  guard 
against  intrusions?  Nothing  —  but  Gibson  wasn't  an 
average  user.  Outraged,  he  developed  a  program 
called  OptOut  (available  free  until  July  1),  which 
removes  Radiate.  He's  working  to  extend  it  to  other 
E.T.  applications,  including  Conducent's  adbot,  the 
mysterious  tsadbot.exe  that  he  found  lurking  in  his 
computer. 

One  big  question  is,  What  will  the  law  have  to  say 
about  E.T.  applications?  Privacy  advocates  claim 
existing  statutes  ban  many  of  them.  The  Computer 
Fraud  and  Abuse  Act,  which  was  enacted  to  prohibit 
hacking  of  government  computers,  contains  some 
broad  language  about  unauthorized  access  to 
computer  data.  There's  also  a  good  chance 
Congress  may  step  in  and  pass  new  legislation  that 
bans  computer  spying  more  directly.  In  any  case,  the 
first  lawsuits  have  already  been  filed:  a  class  action 
against  RealNetworks  seeks  $500  million  in 
damages  on  behalf  of  1  million  RealJukebox  users  in 
California. 

Even  before  E.T.  applications  have  their  day  in  court, 
though,  public  resentment  may  be  leading 
companies  to  be  more  cautious  about  using  them.  In 
an  attempt  to  catch  hackers  who  were  crashing 
servers,  EverQuest,  a  popular  online  role-playing 
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hard  drives  for  hacker  programs.  As  soon  as  it  was 
announced,  Verant  Interactive,  the  company  that 
makes  EverQuest,  was  flooded  with  angry  e-mail.  "I 
got  one  from  a  veteran  saying,  'I  fought  in  Vietnam 
for  the  rights  of  this  country,  and  one  of  those  rights 
is  the  right  to  privacy,'"  says  Verant  Interactive  CEO 
John  Smedley.  In  the  face  of  the  criticism,  Smedley 
decided  to  dump  the  E.T.  application  and  replace  it 
with  technology  that  looks  for  hackers  on  the 
company's  servers.  "It's  probably  not  going  to  be  as 
effective,"  he  says.  "But,  hey,  that's  life." 


Even  Microsoft,  which  evoked  the  ire  of  privacy 
advocates  with  Registration  Wizard,  has  joined  the 
privacy  crusade.  It  introduced  a  spot  on 
Microsoft.com  called  Profile  Center,  which  it  says 
allows  users  to  examine  every  piece  of  data 
Microsoft  has  collected  about  them  and  delete  data 
they  don't  want  Microsoft  to  have.  Yusef  Mehdi,  Vice 
President  of  Marketing  for  MSN,  says  Profile  Center 
"has  grown  from  the  lessons  we  learned  from 
Windows  95."  One  of  the  lessons,  he  notes,  is  that  a 
well-advertised  privacy  policy  can  make  business 
sense.  "If  you  do  that,  you  will  inspire  much  more 
consumer  confidence,"  he  says,  "and  they  will  give 
you  more  data." 

The  new  sensitivity  many  companies  are  exhibiting  is 
good  news  for  computer  users  concerned  about 
privacy.  Yet  for  every  Radiate  or  Verant  that  gets 
caught  and  cleans  up  its  act,  there  are  probably 
more  that  haven't  been  caught  —  and  are  still 
spying.  In  the  long  run,  Cheswick  says,  the  answer 
may  be  to  segment  computer  hard  drives  physically 
into  public  and  private  areas  so  downloads  don't 
have  access  to  information  people  want  to  keep 
confidential.  For  now,  he  has  a  simple  solution:  he 
just  doesn't  download  applications  from  the  Internet 
or  from  e-mail.  That  may  seem  drastic.  But  if  you  go 
the  other  route,  don't  be  surprised  at  what  your 
computer  tells  the  world  about  you. 

—  Adam  Cohen 
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Many  Internet  surfers  have  been  lured  by  siren  songs 
promising  cash  for  clicks,  only  to  have  their  experience 
ruined  by  pop-up  windows  and  continuous  streaming 
advertisements.  Enter  ePilot.com,  a  free  desktop  portal 
that  combines  honest,  unfettered  Web  surfing  with 
state-of-the-art  software  and  substantial  cash  incentives. 

"With  ePilot,  the  user  is  king,"  says  Heath  Clarke, 
president  of  ePilot's  parent  corporation,  eLiberation.com. 
ePilot  pays  its  subscribers  for  each  visit  they  make  to 
participating  Web  sites,  and  for  each  new  subscriber  they 
introduce  to  the  service.  ePilot  expects  1.5  million  Net 
surfers  to  be  using  its  software  by  2001. 
"Simply  put,"  Clarke  says,  "the  more  ePilot 
is  accessed  and  referred,  the  more  money 
users  make." 


Unlike  many  other  Internet  portals,  there  is      |t   Pays 
no  limit  to  the  amount  of  money  users  w  w  w  .  e  P 

can  earn  through  ePilot.  Thousands  have 
already  received  checks  of  up  to  US$100  since  the 
service  launched  in  December  1999.  But  ePilot  does 
more  than  pay  users  cash  for  clicks— it  can  actually 
make  their  online  information  searches  faster  and  more 
rewarding.  "Some  of  my  friends  have  told  me  that 
ePilot  is  their  favorite  money-making  program,"  reads  a 
five-star  user  review  at^AtexaxorrL  "But  I'd  use  it  even  if 
I  wasn't   being  paid." 

Many  users  like  the  easy  access  ePilot  provides 
to  popular  Web  sites.  It  organizes  tens  of  millions  of 
information  and  product  categories  behind  a  single 
desktop  icon  located  next  to  the  Microsoft  Windows 
Start  button.  "[ePilot  includes]  almost  every  category 
imaginable,"  reads  another  Alexa  user  review.  "I  don't 
have  to  go  to  any  more  search  engines  and  look 
through  hundreds  of  sites  for  the  information  I  want." 


To  Click. 

ilot.com 


Now  ePilot  fans  can  get  even  more  out  of  the  Net  with 
its  latest  version,  ePilot  2.0.  Users  can  use  the  new 
software  to  tailor  Internet  content  to  match  their  favorite 
subjects  and  interests,  and  to  change  ePilot's  look  and 
feel.  With  Version  2.0,  subscribers  can  create  their  own 
graphics,  icons,  color  schemes,  and  sound  effects,  and 
choose  between  the  subtle  ePilot  button  or  a  fully 
customizable  ePilot  taskbar. 

ePilot's  home  page  is  a  full-service 
_..  rv—         portal— it  offers  subscribers  free  email,  a 
personal  address  and  calendar,  news, 
weather,  and  more.  ePilot  2.0  accelerates 
the  Web  login  process  by  remembering 
members'  names  and  passwords.  It  also 
allows  users  to  store  multiple  credit  card 
numbers  in  ePilot's  "virtual  wallet,"  which  they  can  use 
to  automatically  complete  online  purchases. 

ePilot  users  are  some  of  the  smartest  people  on  the  Net, 
and  advertisers  are  eager  for  their  attention.  That  is  one 
reason  why  ePilot  protects  its  members  with  an  ironclad 
privacy  policy.  "Your  personal  information  is  safe  with 
us,"  says  eLiberation.com  president  Clarke  in  an  online 
statement.  "We  promise  not  to  sell,  rent,  loan,  or  give 
away  anything  that  identifies  you  personally  to  anyone 
without  your  permission." 

It  is  no  wonder  that  ePilot  is  winning  the  trust  of 
hundreds  of  thousands  of  savvy  Web  shoppers. 
"ePilot  is  a  radically  new  concept  in  getting  paid  for 
[surfing  the  Web],"  says  ePilot  subscriber  William  Otis. 
"Not  only  is  this  very  handy— it's  also  profitable,  and 
it  takes  virtually  nothing  away  from  your  screen  or 
online  experience."  ^ 


Bookmark  This! 


Supplement  Sponsor:     ePilot.com  lwww.epilot.com  I  877-784-0805 
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Can  YOU  handle  the  power? 


"That  was  the  BEST  experience  I  have  ever  had .  .  . 
The  sales  forms  were  smooth,  the  transaction  was 
effortless  and  my  parts  were  here  before  I  was  even 
in  the  office.  Keep  up  the  great  work  and  low  prices! ' 

Steve  Shoup  deja  com,  IS  Managei 
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Compaq 

Kingston 

Crucial 

Presario  5304 

$126.00 

$57.59 

Presario  5070 

$126.00 

$57.59 

Presario  5360 

$126.00 

$57.59 

Micronpc.com 

Kingston 

Crucial 

Millennia  400 

$126.00 

$57.59 

Millennia  450 

$126.00 

$57.59 

Millennia  MAX  450 

$126.00 

$57.59 

Gateway 

Kingston 

Crucial 

G6-450 

$126.00 

$57.59 

G6-400 

$126.00 

$57.59 

Performance  450 

$126.00 

$57.59 

IBM 

Kingston 

Crucial 

Aptiva  (2153)  Model  E2U 
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Aptiva  (2139)  Model  E5D 
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$57.59 

HP 

Kingston 

Crucial 

Pavilion  4530 
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$57.59 

Pavilion  4535 

$126.00 

$57.59 

Kayak  XU  PC  Workstation 

440BX  Chipset 

$143.00 

$65.69 

Vectra  VL  Series  8 

$114.00 

$57.59 

Apple 

Kingston 

Crucial 

Power  Mac  G3PC100 

$126.00 

$57.59 

Power  Mac  G4 

$126.00 

$57.59 
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ThinkFree:  Useful,  Free  Companion  to  Office 
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free  web-based  productivi- 
ty suites  come  in  handy — 
when  you're  online.  Other- 
wise, you're  out  of  luck.  That's 
not  the  case  with  ThinkFree 
Office:  It  has  the  requisite  Web 
component  but  also  includes  a 
downloadable  counterpart  that 
works  offline.  Better  yet,  its 
three  apps  are  file-compatible 
with  Microsoft  Office,  and  the 
company  sets  aside  20MB  of 
online  storage  space  where 
you  can  park  files. 

Downloading  the  Java-based 
suite  (about  2.5MB)  from 
ThinkFree's  Web  site  took  me 
about  17  minutes  with  a  56- 
kbps  connection;  you  must 
also  download  the  individual 
applications — Write  (word 
processor),  Calc  (spreadsheet), 
and  Show  (presentations). 
Each  download  takes  about  5 
minutes  over  a  56-kbps  mo- 
dem. The  good  news:  The 
lengthy  setup  time  is  the  prod- 
uct's  main  drawback.  My 
Word  2000  documents  easily 
opened  in  ThinkFree  Write — 
and  vice  versa — with  only  for- 
matting losses.  Saving  docu- 
ments was  slightly  trickier:  I 
could  save  to  my  Web  space  or 
C:  drive  effortlessly,  but  I  had 
some  difficulty  navigating  to 
local  subdirectories. 

Unlike  other  online  suites, 

ThinkFree  Office 

PRO:  Free,  works  online  or  off,  file- 
compatible  with  Microsoft  Office. 
CON:  Full  download  takes  about  30 
minutes  over  56-kbps  connection. 
VALUE:  Convenient,  free  tool. 
Free 

ThinkFree.com 
408/861-9494 
www.thinkfree.com 
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THINKFREE'S  SUITE  HAS  an  interface  much  like  the  one  in  Microsoft 
Office,  so  there's  nothing  new  to  learn  before  you  start  working. 


ThinkFree  performed  accept- 
ably over  a  56-kbps  connec- 
tion. I  noticed  a  slight  slow- 
down when  using  ThinkFree's 
word  processor  online,  but  I 
experienced  almost  no  delay 
with  Calc — even  when  I  was 


employing  the  Chart  Wizard. 
ThinkFree  offers  a  good 
alternative  to  shrink-wrapped 
apps  and  makes  files  conve- 
niendy  available  anywhere  you 
have  a  Net  connection. 

— Liane  Gouthro 


Make  Digital  Phones 
Analog-Friendly 

DIGITAL  PHONE  lines  offer  con- 
venient features,  but  they  can 
be  lethal  to  a  modem  without  an 
analog  converter.  Konexx's  $129 
Mobile-USB  offers  a  small  (4  inch- 
es), lightweight  (3  ounces),  but 
somewhat  convoluted  fix.  For 
power,  the  Mobile-USB  uses 
your  laptop's  USB  port,  instead 
of  an  AC  adapter  or  batteries  (as 
the  previous  version  did).  But 
the  bundled  USB  cable  is  short, 
at  just  3  inches.  You  also  have  to 
remove  the  telephone's  handset 
from  its  cable,  place  the  cable  in 
the  Mobile-USB,  and  then  con- 
nect the  PC  modem  to  the  other 
end  of  the  device.  Confused?  I 
was,  even  though  I  had  an  illus- 
trated map.  But  once  everything 
was  set  up,  my  analog  modem 
worked  on  a  previously  verboten 
digital  phone.  Konexx;  800/275- 
6354;  www.konexx.com. 

PRODUCT     INFO     NO.     712 

— Michael  S.  Lasky 


NEC's  Color  Laser  Joins  the  Internet  Age 


the  same  engine  that  won 
two  NEC  models  places  on  a 
recent  PC  World  Top  10  Print- 
ers chart  drives  the  NEC  Super- 
Script  4650N.  The  4650N  of- 
fers remote  printing  and  a  fair 
price.  Not  a  bad  deal,  eh? 

I  tested  a  $2700  prerelease 
4650N  model,  which  includes 
96MB  of  RAM,  a  2.1GB  hard 
drive,  and  an  ethernet  inter- 
face. The  basic  ($2000)  4650 
has  only  32MB  of  RAM  with- 
out ethernet  or  hard  drive. 

Catching  up  to  the  competi- 
tion, the  4650  series  features 
IP  addressing  so  you  can  send 
documents  across  the  Internet 
for  printing.  The  4650N  can 


also  print  Adobe  Acrobat  and 
several  Microsoft  Office  files 
without  your  having  to  install 
those  applications. 

The  4650N  produces  very 
black,  very  crisp  text.  Its  graph- 
ics retain  excellent  detail  but 
print  too  dark — more  so  at 
1200  dpi  than  at  600. 

The  PC  World  Test  Center 
has  not  yet  tested  the  4650N. 
However,  several  identically 
rated  NECs  tested  for  March 
hovered  around  9  ppm  on 
text — tops  for  color  lasers — 
and  1  ppm  on  graphics.  The 
4650N  should  do  about  the 
same.  Two  complaints:  NEC's 
control-panel  menus  are  ex- 
ceptionally confusing,  and  if 


you  want  to  print  legal-size 
documents,  you'll  have  to 
spend  $130  on  a  special  tray. 
Otherwise,  the  4650N  has  the 
right  features  and  price  to 
make  a  good  office  laser. 

— Dan  Littman    ■ 

NEC  Superscript  4650N 

PRO:  Excellent  text  quality,  remote- 
printing  capability. 
CON:  Dark  graphics,  difficult  con- 
trol-panel menus. 

VALUE:  Good  deal  for  businesses 
that  need  color  and  remote  printing. 
Street  price:  $2700 
NEC  Technologies 
800/632-4636 
www.nectech.com 

PRODUCT     INFO     NO.     710 
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A  year  and  a  half  ago  we 
took  a  comprehensive 

look  at  privacy 
abuses  on  the  Net. 
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IN  WEB  WE  TRUST? 


Today,  with 
e-commerce 

the  situation  is  worse. 

IT  DANIEL  TYNAN 


ILLUSTRATIONS      BY 
STUART         BRADFORD 


IN  THE  REAL  WORLD,  nobody  knows  what  TV  commercials 
you  watch  or  which  sitcoms  you  surf.  When  you  go  strolling 
through  the  mall,  no  one's  making  note  of  the  stores  you  visit  or 
the  clothes  you  try  on.  But  on  the  Internet,  Web  sites  are  doing  all 
of  this  and  more.  And  that  makes  some  people  mad  as  hell. 

Jeffrey  Wilens  is  so  outraged  that  he  filed  a  class  action  suit 
against  RealNetworks  for  allegedly  violating  his  and  other  con- 
sumers' privacy.  The  attorney  from  Mission  Viejo,  California, 
claims  in  his  suit  that  the  company's  Realjukebox  software  secret- 
ly recorded  the  titles  of  music  CDs  and  MP3  tracks  he  played  on  ► 
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his  PC,  then  sent  the  data  back  to  Real- 
Networks— creating  a  detailed  profile  of 
Wilens'  musical  tastes.  The  suit,  filed  last 
November,  seeks  damages  of  at  least  $500 
for  each  Realjukebox  user  in  California. 

"I  don't  accept  the  concept  that  there  is 
no  privacy  on  the  Internet,"  Wilens  says. 
"I  think  rogue  companies  need  to  learn  to 
modify  their  behavior." 

RealNetworks  flatly  denies  Wilens' 
charges.  "Contrary  to  media  reports,  we 
have  never  monitored  user  behavior  or  lis- 
tening habits,"  says  Keela  Robison,  prod- 
uct manager  for  the  Seatde-based  compa- 
ny. However,  she  admits  that  Realjukebox 
did  create  a  unique  identifi- 
cation number  for  each 
user  and  stored  the  num- 
bers in  the  same  database 
that  holds  user  names  and 
e-mail  addresses.  Theoreti- 
cally, these  numbers  could 
track  where  people  go  on 
the  Web.  The  company 
quickly  released  a  patch 
that  disabled  the  software's 
ability  to  issue  the  IDs,  but 
that  wasn't  enough  to  satis- 
fy Wilens  and  others  who 
had  filed  a  total  of  a  dozen 
suits  against  RealNetworks 
at  press  time. 

Meanwhile,  six  other  lawsuits  are  pend- 
ing against  Internet  advertising  network 
Doubleclick  for  creating  online  profiles  of 
consumers.  And  three  similar  suits  have 
been  filed  against  Alexa,  an  Amazon  sub- 
sidiary. With  few  other  avenues  of  re- 
course at  their  disposal,  users  have  taken 
to  the  courts  to  fight  for  their  right  to  pri- 
vacy. But  the  battle  has  just  begun. 

A  Not-So-Private  Little  War 

welcome  to  privacy  in  the  new  mil- 
lennium, where  surfers  are  caught  in  a 
tug-of-war  with  Web  sites  over  who  owns 
their  personal  data  and  what  can  be  done 
with  it.  In  the  year  and  a  half  since  PC 
World  published  its  special  report  "Privacy 
in  the  Internet  Age"  (www.pcworld.com/ 
sep98/pcprivacy),  e-commerce  has  ex- 
ploded, doubling  in  volume  each  year. 
And  as  the  Net  gradually  becomes  the 
medium  most  Americans  use  to  get  news, 
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ECOMMERCE'S  DIRTY  LITTLE  SECRET 


IN  LESS  TIME  than  it  takes  to  fill  an  online 
shopping  cart,  Eran  Reshef  types  a  command 
into  the  URL  of  a  large  Web  retailer  and  gains 
access  to  the  site's  source  code.  A  few  more 
keystrokes,  and  he's  changed  the  price  of  a 
$3000  computer  to  $300.  "Since  it's  an  auto- 
mated process  with  no  human  looking  in," 
Reshef  explains,  "no  one  would  discover  the 
change.  The  company  would  simply  ship  the 
product  and  charge  me  the  [altered]  price." 

The  cherub-faced,  former  Israeli  army  intel- 
ligence officer  smiles  as  he  shows  us  how  he 


hacked  into  dozens  of  e-business  sites  over 
the  past  year.  From  online  brokers  and  banks 
to  shopping  and  news  sites,  Reshef  found  the 
doors  that  Web  site  designers  forgot  to  lock.  If 
he  wanted  to,  he  could  easily  move  money  be- 
tween accounts,  post  bogus  news  reports,  and 
scoop  up  a  wealth  of  information  about  the 
visitors  to  these  Web  sites. 

But  Reshef  isn't  a  hacker;  he's  a  security  ex- 
pert. His  company,  Perfecto  Technologies  in 
Santa  Clara,  California,  sells  products  designed 
to  thwart  application  hacking-in  which  attack- 
ers bypass  a  site's  firewall  to  assault  its 
scripts,  applets,  and  code.  Companies  hire 
Reshef  to  probe  their  sites  for  weaknesses. 
And  he  knows  what  few  e-business  firms  will 
admit:  No  Web  site  is  truly  secure. 

Breaking  and  Entering 

IN  RECENT  MONTHS,  electronic  vandals  have 
temporarily  shut  down  some  of  the  biggest 
sites  on  the  Web  and  stolen  thousands  of  cred- 


it card  numbers  from  CD  Universe  and  others. 
These  incidents  are  hardly  flukes. 

Reshef  says  Perfecto  has  audited  more 
than  50  brand-name  sites  and  found  security 
breaches  in  all  of  them.  On  eight  of  those 
sites,  he  was  able  to  access  any  file-including 
sensitive  customer  information.  On  two  sites, 
he  was  able  to  execute  financial  transactions 
using  other  people's  accounts.  On  two  others, 
Reshef  gained  full  administrative  control.  The 
longest  amount  of  time  it  took  to  crack  a  site 
was  10  hours;  the  shortest  was  10  minutes. 

Because  confidentiality  agreements  pre- 
vent Reshef  from  naming  the  companies  he 
audited,  we  could  not  verify  his  claims.  But  all 
the  security  experts  we  contacted  said  such 
vulnerabilities  exist  in  thousands  of  Web  sites. 

One  half  to  three-guarters  of  all  commercial 
sites  can  be  hacked,  estimates  John  Pesca- 
tore,  a  research  director  for  the  Gartner 
Group  in  Stamford,  Connecticut.  Jim  Finn, 
principal  of  Unisys  Worldwide  Enterprise 
Security  Practice  in  Reston,  Virginia,  puts  that 
figure  even  higher.  Finn  says  he's  tested  com- 
puter vulnerabilities  for  more  than  200  banks, 
retail  chains,  and  foreign  governments,  and 
has  always  found  a  way  in.  "Unless  the  com- 
puter's disconnected  and  sitting  in  the  base- 
ment, it  can  be  broken  into." 

Too  Much,  Too  Soon 

ONE  REASON  sites  are  so  vulnerable  is  that 
companies  are  pulling  out  the  stops  and 
scrambling  at  Internet  speed  to  get  online.  As 
a  result,  designers  leave  behind  files  and  tools 
that  hackers  can  use  to  break  in.  Another  rea- 
son is  plain  ignorance,  says  Pescatore.  "There's 
a  lot  of  stupidity  built  into  the  CGI  code  [used 
to  transfer  content  to]  Web  sites." 

But  even  the  best  security  measures  may 
not  thwart  all  attacks. 

"Security  is  not  about  absolutes,  it's  always 
about  how  many  layers  [hackers]  have  to  go 
through  to  get  to  something,"  says  Elias  Levy, 
chief  technology  officer  for  Securityfocus.com 
in  San  Mateo,  California.  Levy  says  most  com- 
panies are  just  not  doing  enough. 

"A  hacker  only  has  to  be  lucky  once,"  agrees 
Nigel  Tranter,  vice  president  for  Perfecto. 
"[Sites]  have  to  be  lucky  all  the  time."  These 
days,  the  same  could  be  said  for  consumers. 
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buy  groceries,  rent  movies,  obtain  med- 
ical advice,  and  possibly  vote  for  presi- 
dential candidates,  what  little  personal  pri- 
vacy they  once  had  may  soon  disappear. 

In  some  cases,  we  have  only  ourselves 
to  blame.  Millions  of  people  voluntarily 
give  out  personal  information  to  Web 
sites  in  exchange  for  free  goods  and  ser- 
vices. These  days,  you  can  get  e-mail 
accounts,  Web  hosting  services,  Internet 
access,  even  high-speed  DSL  connections 
without  ever  cracking  open  your  wallet. 
But  to  take  advantage  of  such  offers  you 
must  surrender  bits  and  pieces  of  your 
identity,  from  your  name  and  e-mail 
address  to  your  buying  and  reading 
habits.  Businesses  then  market  this  infor- 
mation to  advertisers,  or  in  some  cases,  to 
anyone  else  who  may  want  it. 

At  the  same  time,  it's  increasingly  diffi- 
cult to  trust  any  site  to  keep  your  person- 
al information  safe  from  intruders.  Lax 
security  at  many  Web  vendors  has  made 
the  Internet  a  hacker's  paradise.  In  the 
past  six  months,  dozens  of  major  Web 
sites  have  suffered  theft  of  credit  card 
information  and  acts  of  vandalism  such  as 
last  February's  spate  of  denial-of-service 
attacks.  As  PC  World  has  discovered,  even 
the  biggest  e-commerce  sites  can  fall  prey 
to  crackers — hackers  who  attack  with  crim- 
inal intent  (see  "E-Commerce's  Dirty  Lit- 
tle Secret,"  at  left). 

In  addition,  the  Web  has  spawned  a 
booming  industry  of  companies  peddling 
so-called  investigative  services  and  soft- 
ware. Loads  of  personal  information — 
from  your  Social  Security  number  to  your 
driving  records — can  be  purchased  online 
for  a  pittance  by  anyone  interested  in  track- 
ing you  down  or  assuming  your  identity. 
In  most  cases,  the  sale  of  this  data  is  per- 
fectly legal.  But  the  results  can  sometimes 
be  deadly  (see  "They  Know  Everything 
About  You"  on  page  107). 

Sure,  you  can  try  to  protect 
yourself  by  giving  out  false 
information  or  using  services 


In  fact,  the  biggest  threat  to  your  priva- 
cy today  isn't  crackers,  stalkers,  or  data 
brokers.  It's  the  legitimate  online  busi- 
nesses— such  as  advertising  networks, 
retailers,  and  others — that  are  creating 
detailed  profiles  of  who  you  are  and  what 
you  do  when  you  are  on  the  Web. 

Profiles  in  Commerce 

consumer  profiling  isn't  new.  For 
years,  mail-order  firms  have  been  track- 
ing the  products  you  buy  so  that  they  can 
send  you  catalogs  specific  to  your  inter- 
ests. Shopping  club  cards  allow  super- 
market chains  to  keep  detailed  records  of 


While  the  practice  of  profiling  is  wide- 
spread in  the  offline  world,  its  scope  was 
limited  until  now  because  mail-order 
firms  weren't  able  to  easily  pool  their 
data — say,  to  combine  records  of  your 
supermarket  purchases  with  a  list  of  your 
magazine  subscriptions.  But  on  the  Net, 
it's  fairly  simple  to  create  a  record  of  every 
site  you  visit  and  every  transaction  you 
make.  As  a  result,  Web  profiles  can  con- 
tain an  unprecedented  amount  of  infor- 
mation about  your  interests  and  activities. 

"Say  you  go  to  a  book  site,"  says  Evan 
Hendricks,  editor  and  publisher  of  the 
Privacy  Times  newsletter  in  Washington, 


Jeffrey  Wi  lenS,  an  attorney  from  Mission  Viejo,  California,  is  taking  RealNetworks  to  court  over  an 
alleged  privacy  violation.  "I  don't  accept  the  concept  that  there's  no  privacy  on  the  Internet,"  he  says. 


that  cloak  your  identity  and  IP  address  as 
you  surf,  post  to  newsgroups,  and  send 
e-mail  (see  "The  Eyes  of  Richard  Smith" 
on  page  108).  But  as  soon  as  you  hand  over 
your  credit  card  to  pay  for  a  book  or  a  vaca- 
tion, your  anonymity  is  gone. 


the  groceries  you  purchase.  And  special- 
interest  magazines,  like  the  one  you're 
reading  now,  regularly  sell  lists  of  sub- 
scribers to  third-party  marketers  (for 
information  on  how  to  remove  your  name 
from  PC  World's  lists,  see  page  14). 


D.C.  "[Profilers]  can  see  what  you  looked 
at  and  what  you  bought.  Do  those  books 
reflect  political  opinions,  sexual  prefer- 
ence, [or]  health  conditions?" 

Critics  paint  a  range  of  dark  scenarios  if 
Web  profiles  were  ever  to  become  ► 


2000 


PRIVACY     S  P  F  r. 


available  for  sale  on  the  open  market.  Cor- 
porations, for  instance,  could  use  profiles 
to  screen  out  job  applicants  based  on 
health  advice  they  may  have  sought  on  the 
Web.  Say  an  applicant  filled  out  a  health 
self-assessment  form  on  a  medical  advice 
site  and  listed  a  family  history  of  colon 
cancer.  Conceivably,  the  site  or  its  part- 
ners could  market  that  information  to 
employers.  Or  say  the  applicant  bought 
medicine  at  a  site  like  Drugstore.com  or 
posted  messages  to  an  HIV  chat  group. 
All  this  information  could  be  added  to  the 
user's  profile,  and  employers  could  lower 
their  insurance  premiums  by  not  hiring 
employees  who  could  potentially  have 
serious  illnesses.  "Those  kinds  of  eco- 
nomic decisions  can  and  will  be  made," 
says  Fred  Druseikis,  chief  architect  for 
HealthMagic,  a  Winter  Park,  Florida, 
company  that  provides  secure  systems  for 
sharing  medical  records  over  the  Internet. 


A  I     R  F  P  (1  R  T 


Click  and  Engage  Technologies,  which 
deliver  banner  ads  to  thousands  of  Web 
pages  and  may  collect  information  about 
you  without  your  knowledge. 

These  firms  use  tracking  cookies  to 
determine  which  banner  ads  you  see 
when  you  access  a  Web  page.  Here's  how 
it  works:  The  first  time  you  view  a  page 
with  a  DoubleClick  banner  ad  on  it,  the  ad 
deposits  a  cookie  on  your  hard  disk.  Then 
any  time  you  view  another  page  contain- 
ing a  DoubleClick  ad,  the  cookie  on  your 
hard  drive  sends  the  URL  of  that  page 
back  to  the  ad  agency's  server;  thus  begins 
a  detailed  clickstream — a  history  of  some 
of  the  places  you've  visited  on  the  Net. 
Currently,  this  clickstream  isn't  matched 
to  your  individual  identity.  Instead,  each 
cookie  contains  a  globally  unique  identifi- 
er (GUI  D),  which  lets  the  ad  server  track 
your  movements  without  identifying  your 
actual  name  or  e-mail  address. 


"Companies  like  DoubleClick...  [are]  getting  a  lot 
of  information  that's  frankly  none  of  their  business." 


"In  terms  of  how  information  is  collect- 
ed and  used  on  the  Internet,"  says  Marc 
Rotenberg,  executive  director  of  the  Elec- 
tronic Privacy  Information  Center  (EPIC) 
in  Washington,  D.C.,  "to  allow  detailed  se- 
cret profiles  to  be  created  is  disastrous." 

Theoretically,  such  profiles  could  also 
become  subject  to  subpoena  or  be  hi- 
jacked by  an  unscrupulous  company  or 
individual.  "In  a  divorce  or  child  custody 
case,  your  spouse  could  use  your  surfing 
habits  against  you,"  says  Larry  Sontag,  a 
Seattle-based  privacy  consultant  and 
author  of  It's  None  of  Your  Business  (PMI 
Enterprises,  2000).  "This  information 
could  be  available  to  hackers,  employees 
of  a  company  who  may  be  having  a  bad 
hair  day,  or  any  crook  with  access  to  the 
Internet,"  Sontag  adds.  "The  lack  of  pri- 
vacy means  that  [this  data]  is  available  to 
both  honest  and  dishonest  people." 

Double  Trouble 

the  biggest  profilers  on  the  Inter- 
net are  companies  whose  sites  you  may 
never  have  visited — networks  like  Double- 


In  this  way,  DoubleClick  has  amassed 
information  on  the  surfing  habits  of  100 
million  users,  while  Engage  boasts  a  data- 
base of  52  million  profiles.  For  more  on 
how  cookies  work,  see  www.pcworld. 
com/aproo/cookies.  (Note:  PCWorld.com 
uses  DoubleClick  to  serve  ads.  If  you  want 
to  opt  out  of  Doubleclick's  cookies,  visit 
www.privacychoices.org.) 

Last  fall,  however,  DoubleClick  quietly 
revealed  that  it  planned  to  link  the  names 
of  surfers,  their  e-mail  addresses,  and 
other  personal  information  about  them  to 
their  clickstreams.  The  New  York-based 
company  said  that  it  would  combine  these 
profiles  with  additional  data  about  the 
purchasing  histories  and  habits  of  some 
88  million  U.S.  households.  DoubleClick 
obtained  this  data  when  it  bought  the 
offline  market  research  firm  Abacus 
Direct  last  November. 

According  to  senior  vice  president 
Jonathon  Shapiro,  Doubleclick's  intention 
was  merely  to  target  ads  to  specific  users. 
"The  whole  goal  here  is  to  make  advertis- 
ing work  by  getting  the  right  message  to 


the  right  user  at  the  right  time,"  he  says. 

But  the  reaction  from  consumers  and 
privacy  advocates  was  swift  and  vocifer- 
ous. EPIC  filed  a  complaint  with  the  Fed- 
eral Trade  Commission,  alleging  that 
DoubleClick  was  "engaging  in  unfair  and 
deceptive  trade  practices  by  tracking  the 
online  activities  of  Internet  users."  The 
FTC  and  attorneys  general  in  New  York 
and  Michigan  initiated  inquiries  into  the 
company's  practices,  and  as  we  went  to 
press  DoubleClick  had  been  named  in  six 
civil  suits  for  alleged  privacy  breaches. 

In  response  to  the  backlash,  the  compa- 
ny suspended  its  plans  to  merge  profiles 
with  personally  identifiable  information. 
In  a  statement  appearing  on  Doubleclick's 
Web  site  last  March,  CEO  Kevin  O'Connor 
admitted  that  he  had  "made  a  mistake"  in 
attempting  to  identify  users.  He  also  vow- 
ed that  "until  there  is  agreement  between 
government  and  industry  on  privacy  stan- 
dards, we  will  not  link  personally  identifi- 
able information  to  anonymous  user  activ- 
ity across  Web  sites." 

But  privacy  advocates  warn  that  Dou- 
bleclick's change  of  plans  is  just  a  tem- 
porary reprieve.  "I  think  you  have  to  read 
the  language  of  Doubleclick's  reversal 
very  carefully,"  says  Robert  Ellis  Smith, 
publisher  of  Privacy  Journal  in  Provi- 
dence, Rhode  Island.  "They  have  simply 
agreed  to  defer  their  plans  until  the  heat's 
gone.  The  company  did  not  agree  to  cease 
combining  online  and  offline  information 
in  the  foreseeable  future  [or]  say  that  it  is 
an  unfair  marketing  technique." 

Are  You  Being  Followed? 

doubleclick  and  RealNetworks  are  not 
the  only  sites  accused  of  tracking  users' 
activities  across  the  Web.  Amazon.com  is 
embroiled  in  a  similar  controversy  involv- 
ing Alexa  Internet,  a  San  Francisco-based 
software  firm  that  the  e-tailing  giant  pur- 
chased in  June  1999.  Amazon  plans  to  use 
Alexa's  software  in  its  ZBubbles  shopping 
service.  The  free  software's  menu  bar  sits 
on  top  of  your  browser  as  you  surf,  sug- 
gesting similar  sites  to  visit  and  letting  you 
share  information  with  other  shoppers. 
But  it  also  captures  the  Web  address  of 
each  page  you  view — and  according  to 
security  expert  Richard  Smith  (see  ► 


"Anyone  can  start  a  business,  call  them- 

THEY  KNOW  EVERYTHING  ABOUT  YOU  -««—.-*-«.-.«,.-*■ 

gle  online,"  says  Reichert. 
IT  ENDED  IN  MURDER,  and  it  started  on  the    ly  bank  or  credit  card  statement  for  $95.  A 

Internet.                                                              company  called  A1  Trace  promises  a  list  of  any-  '*  S  ^US*  BlJSineSS 

So  says  Tim  Remsburg,  stepfather  of  Amy    one's  stocks,  bonds,  and  mutual  funds-includ-  THANK  PCs  and  the  Internet  for  making  it 

Boyer,  a  New  Hampshire  woman  who  was    ing  account  numbers-for  $309.  cheaper  and  easier  to  pull  together  diffuse 

tracked  down  and  murdered  last  fall  by  a        I  tested  one  online  service  called  A.S.A.P.  personal  facts,  says  Robert  Ellis  Smith,  pub- 

cyberstalker  who  had  known  her  in  high  school.    Investigations.  All  I  gave  them  was  my  name  lisher  of  Privacy  Journal. 

Remsburg  places  part  of  the  blame  for  his  and  previous  address:  Within  an  hour,  the  firm  Information  brokers  typically  buy  address- 
stepdaughter's  death  on  Docusearch.com,  delivered  my  Social  Security  number,  physical  es,  unlisted  phone  numbers,  and  Social  Secu- 
which  sold  Boyer's  Social  Security  number  to  descriptions  of  my  wife  and  me,  details  of  the  rity  numbers  from  credit  bureaus  like  Eguifax 
Liam  Youens  for  $45.  Youens  used  that  infor-  cars  we  own,  and  nearly  every  former  address  and  Experian.  State  governments  sell  public 
mation  to  find  out  where  Boyer  worked.  Then  and  employer  I've  had.  A.S.A.P  compiled  the  data  such  as  driving  records,  which  often  con- 
he  went  there  and  shot  her  to  death  before  profile  from  a  half-dozen  Web  sites  selling  my  tain  Social  Security  numbers.  (As  of  June 
turning  the  gun  on  himself.                                 past  for  a  price.  "We  can  find  out  anything,"  2000,  states  will  not  be  able  to  sell  such  infor- 

"I  don't  see  how  do-anything-for-a-buck    says  Robert  Reichert,  the  company's  president,  mation  without  the  driver's  consent.) 

information  brokers  can  sleep  at  night  know-        Reichert  says  that  he  doesn't  offer  his  ser-  In  addition,  banks  and  financial  service  corn- 
vices  to  the  general  public.  Most  of  his  cus- 
tomers are  lawyers  looking  to  recover  hidden 
assets  for  child  sup- 
port from  deadbeat 
parents,  or  they  are 
creditors  looking  for 


ing  they've  got  Amy's  blood  on  their  hands," 
Remsburg  says. 

But  Docusearch.com,  which  declined  com- 
ment, didn't  break  any  laws. 

The  Business  of  Net  Snooping 

CULLING  DATA  from  public  and  private  debtors  who  have 

sources  is  not  only  legal  but  part  of  a  flourish-  skipped  town.  But 

ing  industry.  There's  a  burgeoning  trade  in  clearly  not  every 

plucking  information  from  commercial  data-  online  investigator 

bases.  One  company,  TR  Information  Services,  is  as  discriminating 

advertises  that  it  can  deliver  anyone's  month-  about  its  clients. 


Tim  Remsburg,  below,  places  part  of  the  blame  for  the  murder  of  his  stepdaughter  Amy  Boyei", 
above,  on  an  online  data  broker  that  sold  information  to  Liam  Youens,  who  used  it  to  track  her  down. 


panies  can  buy,  sell,  trade,  and  share  their  cus- 
tomers' financial  information,  including 
account  numbers  and  balances.  Courts  have 
consistently  ruled  that  this  information  is  the 
property  of  the  company,  not  the  customer. 
However,  many  banks  have  curbed  the  prac- 
tice because  of  public  outcry. 

There's  also  the  issue  of  identity  theft. 
Armed  with  your  name  and  Social  Security 
number,  an  impostor  can  open  a  bank  or  charge 
account  and  destroy  your  credit.  Approxi- 
mately 400,000  Americans  will  suffer  identi- 
ty theft  this  year,  say  privacy 
experts.  "Our  traditional  notion  of 
personal  privacy  is  gone,"  says 
Andrew  Shen,  policy  analyst  with 


the  Electronic  Privacy  Information  Center. 

But  privacy  advocates  can  claim  some  vic- 
tories, such  as  new  federal  restrictions  on  the 
use  of  credit  reports  and  driving  records.  And 
Congress  recently  banned  the  practice  of  pre- 
fexf/ng-obtaining  personal  information  about 
others  under  false  pretenses. 

Victoria  Streitfeld,  spokesperson  for  the 
Federal  Trade  Commission,  says  the  FTC 
polices  the  Internet  for  illegal  information  bro- 
kers and  makes  arrests  when  necessary. 

But  for  Tim  Remsburg  and  his  stepdaughter, 
the  FTC's  efforts  are  too  little,  too  late.  "What 
happened  to  Amy's  right  to  privacy?"  he  asks. 
Indeed,  what  happened?  -Tom  Spring 

This  article  was  adapted  from  a  longer  piece 
published  on  pcworld.com.  To  read  it  in  its 
entirety,  go  to  www.pcworld.com/janoo/ 
info_brokers. 
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"The  Eyes  of  Richard  Smith"  below),  these 
URLs  can  contain  a  wide  variety  of  per- 
sonally identifying  information. 

For  example,  when  you  use  a  search 
engine  like  AltaVista,  the  URL  for  the  re- 
sults page  contains  a  text  string  including 
the  terms  you  searched  for.  Depending  on 


how  the  Web  site's  search  engine  works,  a 
URL  could  contain  your  name  or  e-mail 
address,  too,  as  well  as  the  tides  of  books 
you  may  have  bought,  flights  you  may 
have  booked,  and  health  conditions  you 
may  have  researched — all  of  which,  Smith 
says,  get  sent  up  the  wire  to  Alexa.  (Smith 


uncovered  a  similar  problem  having  to  do 
with  Doubleclick  cookies.  A  recent  exam- 
ple involved  Intuit,  whose  Quicken  Web 
site  was  inadvertently  forwarding  users' 
financial  information  to  DoubleClick. 
Intuit  quickly  plugged  the  leak,  and  Dou- 
bleClick says  it  didn't  store  this  infor-  ► 


THE  EYES  OF  RICHARD  SMITH 


IF  THE  INTERNET  is  like  the  Old  West-wild  and 
untamed-then  Richard  Smith  is  the  closest 
thing  we  have  to  a  town  sheriff.  In  the  past 
year,  the  Phar  Lap  Software  CEO  turned  secu- 
rity guru  has  uncovered  what  appear  to  be  pri- 
vacy breaches  in  the  practices  of  RealNet- 
works, Amazon,  and  DoubleClick.  He  also 
coauthored  a  report  revealing  that  numerous 
health  sites  share  visitors'  personal  data  with- 
out their  consent.  Last  September,  Smith 


mation.  It  can't  be  too  heavy  handed,  but  we 
need  some  rules  of  the  road  to  make  clear 
what's  acceptable  and  what's  not. 

PCW:  What  advice  would  you  give  wary  Neti- 
zens  today? 

Smith:  The  main  thing  is:  Computers,  like 


Web  we're  always  tracked.  No  such  thing  as 
hidden  IP  addresses.  [This  makes  it]  real  easy 
to  track  crime.  The  flip  side  is...that  you  can 

attack  someonc.and  no  one  knows  who  you  elephants,  never  forget.  Be  careful  what  infor- 

are.  I  am  troubled  by  the  lack  of  responsibility  mation  you  provide  Web  sites....  If  you're  reg- 

due  to  anonymity  on  the  Web.  istering  your  toaster,  there's  no  need  to  tell 

PCW:  Do  we  need  federal  legislation  to  pro-  them  your  yearly  income.  Be  careful  what  you 

tect  our  fundamental  right  to  privacy?  say  in  newsgroups.  You  can  write  something 

Smith:  It's  silly  to  think  something  as  big  as  today,  and  three  years  later  really  regret  it. 

the  Net  won't  need  regulation,  while  roads  and  Remember,  the  Net  is  still  new.  It's  like  a  12- 

retired  from  Phar  Lap  to  focus  on  Net  security    other  parts  of  commerce  do.  In  privacy,  we  do  year-old  kid,  still  trying  to  find  its  way.  A  lot  of 

and  privacy  issues.  He  spoke  to  us  by  phone    need  some  regulation  because  of  all  the  track-  issues-like  hacking,  privacy,  and  security-will 

from  his  Brookline,  Massachusetts,  home.           ing  going  on  and  the  ability  to  share  that  infor-  get  worked  out  over  the  next  five  years. 
PCW:  You've  become  the  un- 


official guru  of  Internet  securi- 
ty. How  did  this  happen? 

Smith:  My  interest  in  privacy 
really  started  with  the  flap  about  the  Pentium 
III  serial  number  [in  January  of  last  year].  I 
ended  up  looking  at  the  use  of  ethernet 
address  tracking  numbers  and  was  surprised 
at  how  often  they  were  being  used  as  GUIDs. 
They're  almost  like  a  Social  Security  number 
for  your  computer.  The  number  itself  doesn't 
say  who  you  are,  but  the  fact  that  it  goes  into 
databases  all  over  the  Web  is  depressing. 

PCW:  What,  in  your  opinion,  is  the  biggest 
threat  to  consumers  on  the  Net? 

Smith:  As  you  surf  the  Web,  sites  across  the 
board  are  watching  what  you  do,  creating  pro- 
files, learning  all  about  you.  I'm  concerned  that 
all  of  this  data  is  going  to  be  combined  in  one 
big  database....  The  biggest  problem  is  that  a 
lot  of  tracking  is  not  disclosed....  Companies 
like  DoubleClick...  [are]  getting  a  lot  of  infor- 
mation that's  frankly  none  of  their  business. 

PCW:  Will  recent  calls  by  the  government  for 
a  stronger  security  infrastructure  on  the  Net 
lead  to  even  less  privacy  for  consumers? 

Smith:  Certainly.  There's  a  real  interesting 
trade-off  between  anonymity  and  privacy. 
What  we're  really  talking  about  is  [setting]  up  a 
system  so  that  no  matter  what  we  do  on  the 


RlChdrd  Smith,  privacy  advocate  and  former  software  company  executive,  warns  consumers,  "As  you 
surf  the  Web,  sites  across  the  board  are  watchinq  what  you  do...learninq  all  about  you." 
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mation;  but  DoubleClick  did  not  provide 
details  of  what  exactly  is  stored  in  its  pro- 
files.) At  press  rime  the  FTC  had  opened  a 
formal  inquiry  into  Alexa's  information 
gathering  practices,  and  the  company  has 
been  named  in  three  consumer  lawsuits. 
According  to  Dia  Cheney,  director  of 
corporate  communications  for  Alexa,  the 
company  stores  its  users'  Web  trails  an- 
onymously and  keeps  this  data  separate 
from  personally  identifiable  information, 
such  as  e-mail  addresses,  that  users  may 
have  provided  when  they  registered  the 
software.  She  would  not  comment  on 
Smith's  allegations,  saying  they  were  part 
of  the  FTC  inquiry.  "We  are  cooperating 


despite  privacy  policies  against  the  prac- 
tice. The  study,  published  in  January  of 
this  year,  looked  at  health-specific  entities 
such  as  AUHealth  and  WebMD,  as  well  as 
high-traffic  portals  like  AltaVista,  Excite, 
and  Yahoo.  Its  key  finding: 

"On  a  number  of  sites  personally  iden- 
tified information  is  collected  through  the 
use  of  cookies  and  banner  advertisements 
by  third  parties  without  the  host  sites  dis- 
closing this  practice.  There  are  also  in- 
stances where  personally  identified  data  is 
transferred  to  third  parties  in  direct  viola- 
tion of  stated  privacy  policies." 

For  example,  the  report  states  that  some 
sites  provide  health  assessment  tests.  For 


"You  have  to  be  a  kind  of  Jeffersonian  citizen  of  the  Web.. 
If  you're  just  a  passive  consumer,  they  will  drive  right  over 


you. 


fully  with  the  informal  FTC  investigation 
on  a  voluntary  basis,"  she  says.  "Histori- 
cally, Alexa  has  always  been  concerned 
with  protecting  consumer  privacy." 

Policies  Are  No  Insurance 

so  far,  most  of  the  attention  has  been 
focused  on  getting  sites  to  post  privacy 
policies  that  state  what  information  they 
collect  and  what  they  do  with  it.  But  both 
RealNetworks  and  Alexa  have  been  ac- 
cused of  violating  their  own  policies  about 
keeping  user  information  anonymous.  If 
such  claims  are  true,  the  sites  could  be 
held  liable  for  committing  fraud,  says  Pro- 
fessor Gerald  Ferrera,  who  teaches  a 
course  in  cyberlaw  at  Bentley  College  in 
Waltham,  Massachusetts. 

"Promises  made  in  the  privacy  policy 
are  as  much  a  part  of  the  transaction  as 
what  is  delivered  to  the  consumer,"  Fer- 
rera says.  If  a  company  fails  to  observe  its 
policy,  it  can  be  sued  under  the  federal 
Consumer  Fraud  and  Abuse  Act,  as  well 
as  various  common  laws  and  state  and 
federal  consumer  protection  statutes. 

But  policy  breaches  may  be  more  com- 
mon than  most  people  realize.  A  study  of 
21  health  advice  sites  coauthored  by 
Richard  Smith  and  sponsored  by  the  Cal- 
ifornia Healthcare  Foundation  found  that 
many  sites  share  sensitive  information, 


six  of  these  sites  (OnHealth,  AUHealth, 
CVS,  Yahoo,  HealthCentral,  and  Lnteli- 
Health),  the  tests  are  actually  conducted 
by  a  third-party  firm,  a  fact  that  is  not 
made  clear  to  visitors.  Third-party  firms 
that  collect  the  data  (including  personally 
identifying  information)  are  often  not  cov- 
ered by  the  host  site's  privacy  policy;  so, 
theoretically,  these  third  parties  could  sell 
your  health  information  to  marketers, 
insurers,  or  potential  employers.  In  other 
cases,  the  report  found  that  sensitive  data 
such  as  e-mail  addresses  was  inadvertent- 
ly embedded  in  the  URLs  that  were  being 
sent  to  advertisers  and  ad  networks. 

In  short,  Internet  privacy  policies  offer 
consumers  very  little  protection.  "Six 
months  ago,  just  having  a  privacy  policy 
was  considered  pretty  honorable,"  says 
Abner  Germanow,  a  research  manager  at 
International  Data  Corporation  in  Fram- 
ingham,  Massachusetts.  "Today,  most 
policies  are  pretty  worthless." 

A  Georgetown  University  study,  pub- 
lished in  June  1999,  examined  361  com- 
mercial Web  sites  and  found  that  nine  out 
often  ask  you  to  supply  at  least  one  piece 
of  personal  information,  such  as  your 
name,  e-mail  address,  or  postal  address. 
But  only  two-thirds  of  the  sites  in  the  sur- 
vey offered  privacy  statements.  And  less 
than  ten  percent  had  what  researchers 


considered  a  complete  policy — one  that 
provides  consumers  with  a  statement 
about  the  site's  data  collection  practices, 
an  opt-out  clause,  access  to  the  informa- 
tion collected,  a  description  of  how  the  site 
secures  data,  and  phone  numbers  or  e- 
mail  addresses  that  consumers  can  use  to 
contact  the  company.  What's  more,  priva- 
cy statements  can  be  changed  at  will, 
often  without  notification  to  users  or  affil- 
iated sites.  EPIC's  complaint  to  the  FTC 
notes  that  DoubleClick  changed  its  policy 
three  times  in  the  past  three  years. 

"If  you  want  to  find  out  how  a  company 
feels  about  your  personal  privacy,  don't 
look  at  their  privacy  statement,  look  at  tlieir 
business  model,"  says  Rick  Jack- 
son, CEO  of  Privada,  a  San  Jose, 
California-based  maker  of  pro- 
ducts that  allow  consumers  to 
surf  the  Web  anonymously.  A 
former  executive  at  Net  Gravity, 
Jackson  helped  engineer  that  marketing 
firm's  merger  with  DoubleClick  last  Octo- 
ber, despite  personal  reservations  about 
some  of  Doubleclick's  marketing  meth- 
ods. The  more  an  information-gathering 
company  knows  about  you,  he  says,  the 
more  money  it  makes:  "That's  their  busi- 
ness model.  If  it's  a  question  of  profit  ver- 
sus privacy,  profits  come  first  every  time." 

Legal  Remedies 

until  now  the  federal  government 
has  adopted  a  hands-off  approach  to  Inter- 
net privacy — watching  and  waiting  for  the 
Web  industry  to  regulate  itself.  Organiza- 
tions like  Truste  still  say  that  this  is  the 
right  course  to  take.  Truste,  based  in  Cu- 
pertino, California,  oversees  privacy  poli- 
cies for  more  than  1300  Web  sites,  includ- 
ing those  belonging  to  RealNetworks  and 
Amazon. corn's  Alexa  (PCWorld.com  is 
also  a  Truste  licensee).  According  to  Bob 
Lewin,  CEO  of  Truste,  RealNetworks' 
response  to  allegations  of  privacy  abuses 
demonstrates  that  self-regulation  works. 
Lewin  says  that  Truste  convinced  Real- 
Networks to  issue  a  patch  that  prevents  its 
software  from  assigning  a  unique  identi- 
fication number  to  each  user.  Truste  also 
persuaded  the  company  executives  to 
appoint  a  chief  privacy  officer  and  to 
release  RealPlayer  7.0  using  an  opt-in  ► 
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The  prognosis  for  Medsite.com  was  for 
chronic  growth  spurred  by  an  imminent, 
hyperactive  IPO.  So  Jose  Benitez,  Jr.,  Medsite's 
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Subscription  Computing'"  from  micronpc.com 
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model,  so  that  consumers  must  actively 
choose  to  create  a  unique  ID  number, 
rather  than  the  more  common  opt-out 
model  used  by  the  majority  of  Web  sites. 
"We  did  all  of  that  in  the  space  of  one 
week,"  Lewin  says.  "You  show  me  any 
government  body  that  moves  that  fast." 

Unfortunately,  Truste's  influence  is  lim- 
ited to  its  licensees,  which  don't  include 
such  Internet  heavyweights  as  Amazon, 
com  and  Doubleclick  (see  "Should  You 
Trust  Truste?"  on  page  116).  And  while 
Truste  does  perform  quarterly  audits  of  its 
members'  Web  sites  to  ensure  that  the 
stated  privacy  policy  on  the  site  matches 
the  member's  practices,  the  organization 
does  not  specify  what  kinds  of  informa- 
tion members  can  collect,  nor  what  they 
can  do  with  that  information  once  they 
have  it.  "The  problem  with  self-regulation 


is  that  it  rewards  bad  actors,"  says  EPIC's 
Rotenberg.  Once  a  Web  site  begins  gen- 
erating revenue  by  selling  user  profiles 
and  personal  information,  he  explains, 
other  Web  sites  will  have  to  follow  suit  in 
order  to  remain  competitive. 

"There's  no  way  any  number  of  compa- 
nies will  be  able  to  protect  human  rights 
through  a  business  model,"  says  Privacy 
Times  publisher  Evan  Hendricks.  "When 
things  go  wrong,  people  need  a  [legal] 
remedy.  Right  now  we  don't  have  that." 

Although  several  states  have  already 
enacted  their  own  privacy  statutes,  there 
is  no  comprehensive  federal  law  govern- 
ing personal  privacy.  But  the  situation 
may  change  this  year.  Congress  is  cur- 
rently debating  a  dozen  bills  designed  to 
regulate  different  types  of  personal  data, 
from  medical  records  to  financial  matters. 


Ldrry  SOntdQ,  a  Seattle-based  privacy  consultant,  is  concerned  about  the  implications  of  Web  profiles, 
"In  a  divorce  or  child  custody  case  your  spouse  could  use  your  surfing  habits  against  you,"  he  says. 


Senator  Robert  Toricelli  (D-New  Jersey) 
recently  introduced  a  bill  that  would 
require  Web  sites  to  obtain  users'  per- 
mission before  installing  devices  such  as 
cookies  that  track  their  movements  on  the 
Internet.  And  last  February,  Senators 
Richard  Shelby  (R- Alabama)  and  Richard 
Bryan  (D-Nevada)  banded  together  with 
Representatives  Edward  Markey  (D-Mass- 
achusetts)  and  Joe  Barton  (R-Texas)  to 
form  the  Congressional  Privacy  Caucus. 
This  bipartisan  group  is  expected  to  draft 
new  privacy  legislation  that  will  be  based 
on  the  principles  of  user  notification,  con- 
sent, and  access. 

Privacy  wonks,  however,  are  skeptical  of 
what  the  federal  government  may  cook 
up.  "I  think  the  best  place  for  legislation 
in  some  ways  is  at  the  local  or  state  level," 
says  Tom  Maddox,  editor  of  PrivacyPlace. 
com,  a  Berkeley,  California, 
site  specializing  in  privacy 
issues.  "Federal  laws  tend  to 
be  big,  fat,  unwieldy...  sledge- 


hammers swatting  at  gnats.  They  usually 
miss  the  gnat  and  hit  the  rest  of  us." 

Technology  to  the  Rescue? 

you  can  opt  out  of  DoubleClick  pro- 
files. You  can  avoid  using  software  that 
follows  your  footsteps  on  the  Internet. 
You  can  crumble  every  cookie  before  your 
browser  takes  a  nibble  from  it.  And  still 
you  are  at  risk  from  the  next  site,  the  next 
advertiser,  the  next  marketer  who  sees 
dollar  signs  in  your  data. 

One  thing  is  certain:  Online  data  gath- 
ering will  not  go  away.  Too  many  Web 
sites  are  depending  on  the  revenues  from 
selling  user  data  or  delivering  specific 
demographics  to  advertisers.  The  ques- 
tion is  whether  you'll  have  any  say  in  what 
happens  to  your  information. 

"The  real  issue  is,  who's  in  control  of 
my  online  profile,  who  can  access  it,  and 
who's  selling  it?"  says  Germanow.  "When 
I  show  up  at  a  travel  site,  do  I  want  them 
to  know  who  I  am  and  what  frequent  flyer 
program  I  belong  to?  Yes.  When  I'm 
doing  research  on  AIDS  because  I  have  a 
friend  in  the  hospital,  do  I  want  that  as 
part  of  my  profile?  I  don't  think  so." 

Today,  even  vendors  who  sell  products 
for  protecting  anonymity  admit  that  ► 
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there  is  no  easy  solution  for  e-commerce. 
Programs  like  PrivadaProxy  and  Zero- 
Knowledge's  Freedom  can  protect  your 
identity  while  you  browse,  chat,  or  send  e- 
mail,  but  according  to  Privada's  Jackson, 
"As  soon  as  you  decide  you  want  to  buy 
something,  you're  left  unprotected." 

Both  companies  say  they  are  working 
on  schemes  to  allow  consumers  to  shop 
anonymously  and  expect  to  introduce 
products  within  a  year.  Zero-Knowledge's 
Austin  Hill  sees  a  future  in  which  shop- 
ping agent  software  can  assure  a  Web  site 
that  you  have  the  credentials  to  make  a 
purchase,  then  negotiate  what  data  you 
are  willing  to  give  up  in 
return  for  a  good  price. 

"What  if  you  had  the 
most  accurate  version  of 
your  profile  under  your 
lock  and  key?"  asks  Hill, 
president  of  the  Montreal 
firm.  "Your  credit  informa- 
tion, EBay  reputation,  fre- 
quent flyer  miles,  how 
much  shopping  you  do. 
You'd  be  able  to  leverage 
that  data,  build  relation- 
ships with  merchants,  and 
still  maintain  your  privacy." 

Hill  believes  that  consumers  need  to 
start  thinking  about  Internet  privacy  the 
same  way  they  think  about  viruses.  "You 
don't  use  a  computer  unless  you  have 
antivirus  software,"  he  says,  "and  you 
shouldn't  give  away  data  without  protect- 
ing yourself.  Every  time  you  fill  in  a  Web 
form  or  a  registration  card,  make  sure  that 
the  data  is  too  percent  necessary  for 
completing  the  transaction,  and  that  the 
company  will  protect  it."  When  enough 
consumers  refuse  to  give  away  their  per- 
sonal information  for  free,  he  adds,  mer- 
chants will  have  to  respond. 

"You  have  to  be  a  kind  of  Jeffersonian 
citizen  for  the  Web,"  agrees  Maddox.  "Be 
aware,  be  educated,  take  personal  action. 
If  you're  just  a  passive  consumer,  they  will 
drive  right  over  you." 

Daniel  Tynan  is  a  contributing  editor  for 
PC  World,  and  Eric  Dahl  is  a  staff  editor 
for  PC  World.  Tom  Spring  is  senior  re- 
porter for  PCWorld.com.  ■ 


SHOULD  YOU  TRUST  TRUSTE? 


WEB  PRIVACY  IS  more  important  now  than 
ever.  So  if  your  favorite  site  carries  a  privacy 
seal  of  approval  from  an  independent  organi- 
zation like  Truste,  you  should  feel  safer,  right? 
Maybe  not.  Internet  giants  like  Microsoft, 
Dejarand  RealNetworks  all  have  sites  ap- 
proved by  Truste.  But  each  made  news  last 
year  by  engaging  in  practices  that  allegedly 
violated  user  privacy.  Which  raises  the  gues- 
tion:  How  far  can  you  trust  a  seal  from  Truste? 
A  handful  of  organizations  dole  out  Web 
privacy  seals.  Truste  is  one  of  the  largest,  with 


licensees  paying  from  $299  to  $4999  for  a 
seal  that  says  their  privacy  policy  passes 
Truste's  muster.  BBBOnline  and  CPA  Webtrust 
also  charge  for  audits  and  seals,  as  do  the  top 
six  CPA  firms.  (Other  organizations-such  as 
Enonymous.com-do  not  charge,  but  they  rate 
sites  on  the  basis  of  certain  levels  of  privacy 
offered  under  the  terms  of  their  policy.) 

But  as  events  cited  in  these  pages  show, 
simply  posting  a  policy  and  seal  doesn't  mean 
a  site  won't  violate  your  privacy.  And  critics 
say  Truste  monitors  members  inadeguately 
once  it  grants  a  seal.  Instead,  it  relies  on  con- 
sumers and  privacy  advocates  like  Richard 
Smith  (see  "The  Eyes  of  Richard  Smith"  on 
page  108)  to  report  privacy  violations. 

The  RealNetworks  incident,  for  instance, 
was  resolved  after  being  brought  to  Truste's 
attention,  but  Smith  says  that  the  credit  goes 
to  the  media  and  consumers.  "[Truste  isn't] 
really  an  enforcement  organization,"  Smith 
says.  "Mostly,  the  press  coverage  is  what  gets 
companies  to  change  privacy  policies." 

Truste  does  perform  guarterly  checks  of 


sites.  But  CEO  Bob  Lewin  admits  that  Truste 
doesn't  look  at  a  site's  books  to  make  sure  it's 
not  selling  data,  or  at  its  programming  code 
to  ensure  data  siphoning  isn't  taking  place. 
"[T]o  do  those  things  would  be  a  bit  more 
expensive  than  what  we  do  today,"  he  says. 

"We've  done  a  satisfactory  job,"  he  adds, 
"but  I  agree  that  we  can  do  better." 

Critics  also  guestion  Truste's  impartiality. 
The  organization  was  created  by  the  industry 
it  oversees,  and  critics  argue  that  it  relies  on 
its  sponsors-Microsoft  among  them-to  sup- 
port it.  Lewin  denies  this,  saying,  "Eighty-five 
percent  of  our  funding  comes  from  license 
fees....  [N]o  single  sponsor  has  the  financial 
clout  to  influence  this  organization." 

In  its  three  years  of  existence,  Truste  has 
never  revoked  a  seal.  And  Lewin  says  less 
than  2  percent  of  Web  businesses  that  ap- 
proach it  for  a  seal  are  rejected. 

Sealed  for  Your  Protection? 

SO  WHAT  DOES  a  privacy  seal  in  general  say 
about  a  site?  "It  tells  you  the  site  did  have  to 
answer  guestions  about  privacy,  [and]  that  it 
does  have  a  privacy  policy,"  says  Ari  Schwartz, 
policy  analyst  at  the  Center  for  Democracy 
and  Technology.  "But  a  seal  doesn't  grant  you 
any  more  control  over  your  [personal]  infor- 
mation than  at  any  other  Web  site."  A  Web 
site  can  still  collect  and  in  some  cases  sell 
your  data,  as  long  as  it  tells  you  it's  doing  so. 

And  most  privacy  policies  don't  cover  third- 
party  involvement  in  a  site.  So  a  firm  like  Dou- 
bleclick can  do  what  it  wants,  and  until  now 
the  host  site  hasn't  been  obligated  to  tell  you 
about  it.  Also,  Truste's  license  doesn't  cover 
software  downloads  like  RealJukebox  or  Win- 
dows 98.  (Last  year  Microsoft  was  discovered 
to  be  collecting  user  information  through  its 
registration  wizard.)  Truste  announced  recent- 
ly that  it  plans  to  expand  its  policies  to  include 
software  and  third-party  contractors. 

In  the  end,  privacy  seals  tell  you  that  a  Web 
site  has  a  privacy  policy  and  may  be  held 
legally  accountable  for  breaking  it.  How  likely 
a  site  is  to  follow  its  privacy  policy  is  a  sepa- 
rate issue,  and  unfortunately  it's  one  you  still 
have  to  address  by  asking  yourself  a  basic 
consumer  guestion:  How  well  do  I  trust  the 
company  I'm  dealing  with?  -Eric  Dahl 
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Bye-Bye  Record  Store, 
Hello  Web  Music? 


On  the  Net... 
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THROUGHOUT  A  LIFELONG  music  addiction,  I've  poured  money  into 
an  unending  parade  of  audio  formats — vinyl  (33  and  45  rpm),  eight-track, 
cassette,  and  CD.  And  it  now  looks  like  recorded  music  as  we  knew  it 
may  be  supplanted  by  music  that  has  no  physical  form  at  all:  digital 


downloads.  Portable  MP3 
players  such  as  Dia- 
mond's Rio  are  already  ; 
a  hit.  Tomorrow,  who 
knows?  Everything      J 
from  living-room 
stereos  to  clock 
radios  could  be 
wired  to  play  digi-    \ 
tal  songs  that  we   * 
buy  on  the  Web. 

Of  course,  if  you're 
oblivious  to  intellec- 
tual-property laws,  the 
age  of  downloadabl 
audio  is  in  full  swing.  Tunes  are  flying  off 
the  Web  as  fast  as  pirated  Britney  Spears 
tapes  off  a  street  vendor's  table.  Consider 
the  ingenious  but  questionable  Napster 
(www.napster.com),  which  lets  its  users 
swap  MP3  music  files  across  the  Net  with 


point-and-click  ease — copy- 
rights be  damned.  Already 
an  institution  on  college 
campuses  everywhere, 
Napster  is  the  target  of  a 
lawsuit  by  the  Re- 
j    cording  Industry  As- 
;   sociation  of  America. 
Me,  if  I  can  find  my 
J    kind  of  music  on  the 
I   Internet,  I'm  more 
than  happy  to  pay  for 
it.  (Hey,  Iggy  Pop  needs 
to  eat,  too.)  But  I  will  not  be 
bestowing  my  compact  discs 
on  the  Salvation  Army  anytime  soon. 

ELVIS  IS  MISSING 

with  more  than  250,000  download- 
able songs — all  legal,  all  free — MP3.c0m 
seemed  like  a  logical  spot  to  begin  a  virtu- 
al-music shopping  excursion.  However, 


Web  Shopping  Review  Sites 


^^  THERE  MUST  BE  15  kajillion  shop- 

JllllfJ  ping  s'tes  on  tfie  Web'  mavtie  more- 
^^^  So  who  deserves  your  business? 
Find  out  at  these  sites,  which  rate  online 
stores  for  selection,  price,  and  service. 

1.  RatinqWonders.com:  Ordinary  netizens 
and  the  site's  own  reviewers  judge  hundreds 
of  Web  stores  in  more  than  75  categories; 
good  store  policy  info,  too. 

2.  ResellerRatings.com:  More  than 
14,000  shoppers  provide  often  fearlessly 
critical  evaluations  of  1100  mail-order  hard- 
ware and  software  merchants. 


3.  Gomez.com:  Astute  evaluations  of 
online  book  stores,  travel  agents,  toy  empo- 
riums, and  more  from  the  much-respected 
research  firm. 

4.  BizRate.com:  The  grading  curve  seems 
overly  generous  at  this  user-review  site,  but 
plentiful  facts  on  store  policies  and  a  shop- 
ping rebate  program  make  it  worth  a  visit. 

5.  ShopNow  Consumer  Guide  (www. 
2020consumer.com):  Real  shoppers'  rat- 
ings presented  as  slick  bar  charts,  plus  a 
shopping  bot  and  consumer  tips;  would  ben- 
efit from  higher  voter  turnout. 


At  Your  Service:  Need  your  house  paint- 
ed? Your  poodle  groomed?  Your  wedding 
photographed?  Then  take  a  gander  at 
Handshake.comand  EErenzy  (www.efren- 
zy.com),  new  sites  designed  to  put  folks 
who  need  services  in  touch  with  those  who 
provide  them.  The  biggest  benefit:  com- 
peting price  quotes  from  multiple  compa- 
nies... Green  Stamps  Get  Wired:  S&H 
Green  Stamps  are^back-and^online-at 
Greenpoints.com.  You  get  20  points  for 
every  dollar  spent  at  1800Flowers.com, 
Borders.com,  and  Dell.com,  among  other 
sites.  Collect  129,600  points,  and  a  two- 
person  kayak  could  be  yours...  Amazon 
Annoyance:  Alexa  (www.alexa.com),  a  Web 
navigation  tool  that  was  once  one  of  my 
favorite  browser  plug-ins,  has  not  been 
improved  by  its  strange,  intrusive  new 
ZBubbles  feature.  The  main  purpose  seems 
to  be  to  nudge  you  to  shop  at  Amazon.com 
(which  now  owns  Alexa)  no  matter  where 
you  go  on  the  Web.  Gee,  thanks. 

precious  few  of  its  tracks  are  by  musical 
superstars  or  even  semi-well-known 
artists;  not  a  problem  for  the  acoustically 
adventurous,  but  vexing  if  (like  me)  you 
like  your  music  comfortably  familiar. 

So  I  moved  on  to  Listen.com,  a  site 
bankrolled  in  part  by  that  arbiter  of  musi- 
cal fashion,  Madonna.  This  nifty  search 
engine  for  MP3S  (and  competing  formats, 
such  as  Liquid  Audio)  links  only  to  above- 
board  stuff,  with  lots  of  tracks  by  name- 
brand  performers.  True,  the  selection  is 
hit-or-miss — sometimes  bizarrely  so.  You 
can  download  384  songs  by  Miles  Davis 
but  zero  by  Wynton  Marsalis;  there's 
music  by  the  Animals,  Byrds,  and  Eagles 
but  not  by  the  Beades,  Monkees,  or  Tur- 
des.  And  there  are  multiple  tracks  by  the 
Chairman  of  the  Board  but  nary  a  one  by 
the  King  or  the  Boss.  ► 
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Many  of  the  music  files  that  Listen.com 
links  to  are  free  downloads.  Others,  how- 
ever, cost  around  a  buck  apiece  at  such 
sites  as  Musicmaker.com  and  EMusic 
(www.emusic.com).  How  smoothly,  you 
might  ask,  goes  the  download  process? 
My  purchases  at  EMusic  (a  couple  of  Her- 
man's Hermits  ditties)  went  off  without  a 
hitch.  Over  at  Musicmaker,  though,  I  paid 
good  money  for  Marlene  Dietrich's 
"Falling  in  Love  Again,"  and  all  I  got  was 
an  unplayable  28-byte  file.  I'm  not  sure 
what  went  wrong;  Musicmaker  customer 
service  ignored  my  e-mails. 

FROM  CD  TO  WEB 

for  the  time  being,  I  guess  I'll  meet 
the  Web  music  revolution  halfway.  I'll  put 
my  archaic  compact  disc  collection  on- 
line— courtesy  of  a  (mostly)  cool  MP3.c0m 
feature  known  as  My.MP3.c0m.  What 
makes  it  work  is  a  free  software  download 
called  Beam-It.  Stick  a  CD  in  your  PC's 
CD-ROM  drive,  and  Beam-It  adds  its  con- 


tents to  a  personal  music  library  that  you 
can  listen  to  anywhere  you've  got  a  Net 
connection.  The  process  takes  seconds 
per  CD.  Rather  than  actually  copying  the 
disc,  Beam-It  unlocks  a  replica  that's 
already  stored  on  MP3. corn's  servers.  Of 
the  40  CDs  I've  tried  to  have  replicated  so 
far,  around  90  percent  were  available. 
(Among  the  missing:  a  Carole  King  disc 
and  the  Great  Muppet  Caper  soundtrack.) 

At  its  best,  My.MP3.com's  Hi  Fi  mode 
comes  close  to  CD  quality,  at  least  to  my 
non-audiophile  ears.  But  it  devours  band- 
width, so  songs  tend  to  sputter.  (Even  my 
cable  modem  has  trouble  keeping  up.) 
The  less  glitch-prone  Lo  Fi  mode  has  a 
tinny,  AM  radio-like  sound  but  still 
makes  for  pleasant  background  noise. 

As  with  Napster,  the  music  industry  has 
its  knickers  in  a  twist  over  My.MP3.c0m. 
Already,  the  RIAA  is  suing — despite  the 
fact  that  the  service  aims  to  give  you 
access  to  songs  you  paid  for  on  CD.  And 
you  can't  e-mail  bootlegs  to  your  buddies, 


WHO  SAYS  THE  WEB  is  so  popular?  More 
than  95  percent  of  the  people  on  the  planet 
don't  have  access  to  the  Internet. 

SOURCE:  NUA  INTERNET  SURVEYS 

since  music  is  delivered  as  streaming 
audio  that  can't  be  saved  to  a  hard  drive. 

My  take:  Beam-It  fans  need  feel  no 
more  guilty  than  folks  who  bought  VCRs 
back  when  Hollywood  tried  to  outlaw  that 
emerging  technology.  And  I'm  sure  the 
knotty  legal  issues  surrounding  online 
music  will  get  untangled.  Maybe  even 
soon,  given  the  America  Online-Time 
Warner  merger  that  will  make  AOL  one 
of  the  biggest  music  publishers  on  earth. 

Insert  your  own  "You've  Got  Songs!" 
quip  here — and  tune  in  tomorrow  for  fur- 
ther developments. 

Contact  PC  World  Senior  Editor  Harry 
McCracken  at  websawy@pcworld.com.   ■ 
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■  Diee.com  Ranked  Top  IT  Job 
Board  In  Online  Recruiting  Sector 

EarthWeb's  Dice.com  (www.dice.com),  a 
nationwide  job  sitejfor  IT  professionals- 
announced  that  its  job  postings  have  grown 
to  more  than  175,000  jobs.  The  company 
also  says  that  Media  Mefrix  and  Aiexa  Inter- 
net,  independent  research  firms  that  measure 
Internet  audience  usage,  ranked  dice.com  as 
one  of  the  top  1 0  most  visited  sites  in  the 
online  recruiting  sector,  and  the  leading  job 
board  for  IT  professionals  during  1999. 
Dice.com  also  announced  that  its  customer 
base  for  paid  job  listings  has  now  grown  to 
over  5,400  customers.  The  MicroTimes.com 
job  search  engine  uses  the  dice.com  data- 
base. 
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■  Dice.com  Ranked  Top  IT  Job 
Board  in  Online  Recruiting  Sector 

EarthWeb's  Dice.com  (www.dice.com),  a 
nationwide  job  sitsTor  IT  professionals' 
announced  that  its  job  postings  have  grown 
to  more  than  175,000  jobs.  The  company 
also  says  that  Media  Metrix  and  Alexa  Inter- 
net, independent  research  firms  that  m~ea~sure 
Internet  audience  usage,  ranked  dice.com  as 
one  of  the  top  1 0  most  visited  sites  in  the 
online  recruiting  sector,  and  the  leading  job 
board  for  IT  professionals  during  1 999. 
Dice.com  also  announced  that  its  customer 
base  for  paid  job  listings  has  now  grown  to 
over  5,400  customers.  The  MicroTimes.com 
job  search  engine  uses  the  dice.com  data- 
base. 


...  u,  <J 


WEB  SAVVY 


Many  of  the  music  files  that  Listen.com 
links  to  are  free  downloads.  Others,  how- 
ever, cost  around  a  buck  apiece  at  such 
sites  as  Musicmaker.com  and  EMusic 
(www.emusic.com).  How  smoothly,  you 
might  ask,  goes  the  download  process? 
My  purchases  at  EMusic  (a  couple  of  Her- 
man's Hermits  ditties)  went  off  without  a 
hitch.  Over  at  Musicmaker,  though,  I  paid 
good  money  for  Marlene  Dietrich's 
"Falling  in  Love  Again,"  and  all  I  got  was 
an  unplayable  28-byte  file.  I'm  not  sure 
what  went  wrong;  Musicmaker  customer 
service  ignored  my  e-mails. 

FROM  CD  TO  WEB 

for  the  time  being,  I  guess  I'll  meet 
the  Web  music  revolution  halfway.  I'll  put 
my  archaic  compact  disc  collection  on- 
line— courtesy  of  a  (mosdy)  cool  MP3.c0m 
feature  known  as  My.MP3.c0m.  What 
makes  it  work  is  a  free  software  download 
called  Beam-It.  Stick  a  CD  in  your  PC's 
CD-ROM  drive,  and  Beam-It  adds  its  con- 


tents to  a  personal  music  library  that  you 
can  listen  to  anywhere  you've  got  a  Net 
connection.  The  process  takes  seconds 
per  CD.  Rather  than  actually  copying  the 
disc,  Beam-It  unlocks  a  replica  that's 
already  stored  on  MP3.com's  servers.  Of 
the  40  CDs  I've  tried  to  have  replicated  so 
far,  around  90  percent  were  available. 
(Among  the  missing:  a  Carole  King  disc 
and  the  Great  Muppet  Caper  soundtrack.) 

At  its  best,  My.MP3.com's  Hi  Fi  mode 
comes  close  to  CD  quality,  at  least  to  my 
non-audiophile  ears.  But  it  devours  band- 
width, so  songs  tend  to  sputter.  (Even  my 
cable  modem  has  trouble  keeping  up.) 
The  less  glitch-prone  Lo  Fi  mode  has  a 
tinny,  AM  radio-like  sound  but  still 
makes  for  pleasant  background  noise. 

As  with  Napster,  the  music  industry  has 
its  knickers  in  a  twist  over  My.MP3.c0m. 
Already,  the  RIAA  is  suing — despite  the 
fact  that  the  service  aims  to  give  you 
access  to  songs  you  paid  for  on  CD.  And 
you  can't  e-mail  bootlegs  to  your  buddies, 


WHO  SAYS  THE  WEB  is  so  popular?  More 
than  95  percent  of  the  people  on  the  planet 
don't  have  access  to  the  Internet. 
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since  music  is  delivered  as  streaming 
audio  that  can't  be  saved  to  a  hard  drive. 

My  take:  Beam-It  fans  need  feel  no 
more  guilty  than  folks  who  bought  VCRs 
back  when  Hollywood  tried  to  outlaw  that 
emerging  technology.  And  I'm  sure  the 
knotty  legal  issues  surrounding  online 
music  will  get  untangled.  Maybe  even 
soon,  given  the  America  Online-Time 
Warner  merger  that  will  make  AOL  one 
of  the  biggest  music  publishers  on  earth. 

Insert  your  own  "You've  Got  Songs!" 
quip  here — and  tune  in  tomorrow  for  fur- 
ther developments. 

Contact  PC  World  Senior  Editor  Harry 
McCracken  at  websawy@pcworld.com.   ■ 
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■  Dke.com  Ranked  Top  IT  Job 
Board  In  Online  Recruiting  Sector 

EarthWeb's  Dice.com  (www.dice.com),  a 
nationwide  job  site  for  IT  professionals 
announced  that  its  job  postings  have  grown 
to  more  than  175,000  jobs.  The  company 
also  says  that  Media  Mefrix  and  Alexa  Inter- 
nef,  independent  research  firms  that  measure 
Internet  audience  usage,  ranked  dice.com  as 
one  of  the  top  1 0  most  visited  sites  in  the 
online  recruiting  sector,  and  the  leading  job 
board  for  IT  professionals  during  ]  999. 
Dice.com  also  announced  that  its  customer 
base  for  paid  job  listings  has  now  grown  to 
over  5,400  customers.  The  MicroTimes.com 
job  search  engine  uses  the  dice.com  data- 
base. 
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News  Briefs 


■  Dice.com  Ranked  Top  IT  Job 
Board  In  Online  Recruiting  Sector 

EarthWeb's  Dice.com  (www.dice.com),  a 
nationwide  job  site  for  IT  professionals' 
announced  that  its  job  postings  have  grown 
to  more  than  1 75,000  jobs.  The  company 
also  says  that  Media  Mefrix  and  Alexa  Inter- 
net, independent  research  firms  fhaTmeasure 
Internet  audience  usage,  ranked  dice.com  as 
one  of  the  top  1 0  most  visited  sites  in  the 
online  recruiting  sector,  and  the  leading  fob 
board  for  IT  professionals  during  j  999. 
Dice.com  also  announced  that  its  customer 
base  for  paid  job  listings  has  now  grown  to 
over  5,400  customers.  The  MicroTimes.com 
job  search  engine  uses  the  dice.com  data- 
base. 
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The  Pirst  Annua!  Buying  ^  Selling 
B-Content  Conference 


By  Cary  Kenney,  Coordinator,  Online  Resources 
Web  Publications,  St.  Petersburg  Times 
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executive-level  buyers,  sellers,  and  aggre- 
gators of  e-content  gathered  in  early  April 
for  a  2-day  conference,  the  first  ever  of  its  kind, 
organized  by  Online  Inc.  and  Outsell,  Inc.,  at  the 
Camelback  Inn  Resort  in  Scottsdale,  Arizona.  It 
was  a  professional  debut  for  Online's  E-Conlent 
magazine,  which  replaced  Dalabase\ast  sum- 
mer, and  for  Marydee  Ojala  in  her  new  role  as 
its  editor.  The  conference  joins  the  list  of  Online- 


sponsored  annual  professional  conferences. 

Outsell  is  a  research  and  advisory  firm  that 
specializes  in  content  services  for  the  informa- 


a  session  with  one  of  Outsells  analysts  for  con- 


participants  might  want  advice.  Participants  also 
received  a  useful  36-page  briefing:  "Outlook2000: 
Issues  in  the  information  Marketplace." 


Prospecting  on  the  Content  Frontier 


The  group  of  almost  300  attendees 
consisted  of  corporate  librarians  in 
their  roles  as  purchasers  of  informa- 
tion, content  providers  both  large  and 
small,  and  top  executives  and  legal 
counsel  from  every  flavor  of  informa- 
tion aggregator  —  infomediaries,  syn- 
dicators,  and  integrators  —  all  of  whom 
process  and  redistribute  digital  con- 
tent. Eve  Sawicki  of  CRIBIS,  which  pro- 
duces the  business  research  Web  site 
Skyminder.com,  said,  "This  is  the  first 
conference  I've  been  to  where  I  didn't 
hear  one  thing  about  print." 

So  What's  a  Librarian  Like  Me 
Doing  in  a  Place  Like  This? 

A  few  of  the  librarians  attending,  such 
as  those  from  the  news  media,  handle 
both  the  sale  of  huge  blocks  of  daily  con- 
tent, as  well  as  the  purchase  of  informa- 
tion for  their  company's  internal  use. 
This  double  role  extends  their  responsi- 
bilities beyond  the  traditional  function 
of  many  librarians.  Special  librarians 
formerly  known  as  Library  Director  now 
more  likely  hold  titles  such  as  Director 
of  Electronic  Information  or  Director  of 
Information  Services. 

Some  aggregators,  unaware  of  librar- 
ians' role  in  acquiring  and  organizing 
information,  suggested  that  a  job  mar- 
ket for  librarians  might  take  on  new  sig- 
nificance in  a  content-rich  environment. 
Charles  Terry,  president  and  CEO  of 
Comtex  News  Nenvork,  the  big  informa- 
tion aggregator  and  distributor,  seemed 
unaware  of  how  the  role  of  librarians  had 
already  changed.  He  described  sitting  on 
the  steps  of  his  fraternity  house,  figuring 
out  mat  the  college  library  would  not  be 
of  much  use  to  him.  But  now  he  could 
see  a  person  with  library  skills  as  being 
truly  useful  in  the  information  market- 
place. He  thinks  there  could  be  a  reaJ  job 
called  corporate  librarian. 

Content,  Content,  and  Content 

The  answers  to  the  question,  "What 
is  content  anyway?,"  went  to  full  ex- 
tremes, from  a  speaker  who  avowed  as 
how  we  may  actually  be  entering  "The 
Age  of  Content,"  to  the  idea  put  forward 
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by  Douglas  Bennett  of  EoExchange  Inc. 
that  "Content  is  cake,  not  wine."  It  has  a 
shelf  life  and  goes  stale;  so  hurry,  hurry, 
hurry  with  that  content,  please. 

A  fascinating  array  of  new  expertise 
appeared  both  in  the  form  of  new  com- 
panies and  leading-edge  thinkers.  There 
were  no  futurist  pundits,  but  a  number 
of  speakers  on  a  variety  of  topics  chose 
to  talk  about  the  Internet  in  general, 
where  it  has  come  from,  and  where  it 
is  going.  Here  are  some  of  the  most 
common  threads: 

•  Outsells  research  shows  that  the 
information  industry  suffers  from  a 
chronic  identity  crisis.  Any  awkward- 
ness that  might  have  occurred  at  the 
conference  sprang  from  this  sense  of  not 
knowing  how  one  relates  to  anyone  else. 
Outsell  says  further  that  the  rest  of  the 
world  doesn't  know  an  information 
industry  exists.  The  press  doesn't  know; 
the  stock  market  doesn't  know;  and, 
most  surprisingly,  the  people  who  use 
the  information  industry's  information 
don't  know  either  (see  Figure  1  above). 
•Why  should  a  good  searcher  care  about 
a  lot  of  wheeling  and  dealing  over  who 
gets  to  sell  what?  Because  an  essential 
supplier  that  doesn't  reveal  itself  is  a 
slippery  creature.  Searchers  who  buy 
any  information  access  at  all  know  this. 
Protection  through  more  careful  con- 
tracts at  every  level  of  the  information 


marketplace  is  the  best  defense,  but 
many  providers  of  original  content  have 
already  been  burned.  If  searchers  see 
dependable  Web  content  offerings  dis- 
appear, most  of  the  time  they  should 
assume  it's  a  deal  gone  bad. 

•  Web  site  models  are  shifting  from  the 
general  to  the  specific.  Portals  have 
overwhelmed  people.  A  sense  of  com- 
munity can  be  developed  through 
common  interest  in  narrowly  defined 
topics,  such  as  the  way  people  share 
information  on  a  listserv. 

•  Broadband  wireless  communica- 
tions will  take  over  everything,  making 
it  possible  for  PDAs,  phones,  pagers, 
computer  workstations,  and  laptops  to 
communicate  with  each  other  faster 
and  cheaper.  When  wireless  is  truly 
ubiquitous,  it  will  knock  out  all  other 
information  delivery  channels. 

•  The  market  is  global.  Ownership  is  at 
the  desktop. 

•  Free  access  to  useful  information.  How 
can  owners  of  original  content  compete? 
Is  "You  get  what  you  pay  for"  still  true? 

•  Need  for  standards  and  metrics.  Those 
responsible  for  making  the  end  prod- 
uct work  for  consumers  worry  about 
the  best  combination  of  available  tech- 
nology and  information  resources  to  get 
the  job  done.  Incompatible  formats 
are  addressable,  but  firewalls  and 
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Figure  2. 

other  forms  of  internal  security  are 
serious  obstacles. 

•  Consumers  on  the  Net  are  believed 
to  be  brand-blind.  Can  this  be  true? 
People  don't  go  straight  for  The  New 
York  Times  and  The  Washington  Post 
for  news  online?  A  strong  brand  like 
the  Encyclopaedia  Britannica  and  its 
digital  lack  of  success  has  befuddled 
many  Web  developers. 

•  New  super-smart  relevancy  search 
engines  are  in  the  works. 

How  to  describe  Brewster  Kahle?  He's 
the  Internet  guru  known  to  many  infor- 
mation professionals  as  the  guy  who  has 
been  archiving  the  entire  Internet  for 
several  years.  What  many  people  don't 
know  is  that  Kahle  has  also  created  six 
successful  start-ups  and  is  one  of  the 
more  original  thinkers  one  will  ever 
encounter.  One  of  his  most  recent 
projects  is  Alexa^a  free  Web  naviga- 
tion service  that  provides  a  vertical 
toolbar  supplying  deep  information 
about  sites  viewed.  Alexa  Internet  was 
acquired  by  Amazon.  Kahle  talked 
about  the  grip  the  top  10  or  20  Web  sites 
—  all  search  engines  except  for  eBay — 
have  on  the  Internet. 

Keynote  speaker  Mark  Walsh,  of  the 
successful  business-to-business  (or  B2B) 
Internet  site,  Verticalnet,  said  because 


distribution  costs  in  the  virtual  world 
are  so  low  and  turnaround  on  goods  can 
be  so  fast,  satisfying  the  buyer  is  a  pri- 
mary focus.  And  that  is  what  the  confer- 
ence to  a  large  extent  set  out  to  do.  Be- 
ing listened  to  as  the  client  at  all  levels 
was  a  refreshing  approach  for  informa- 
tion consumers  —  both  for  those  buy- 
ing for  commercial  Web  sites  and  for 
those  making  purchases  for  internal 
Intranet  consumption. 

What  Do  Major  Users  Want? 

Willem  Noorlander,  vice  president 
and  Market  Data  manager  at  Deutsche 
Bank,  spends  $4  million  per  year  pur- 
chasing intranet  content,  end-user  data, 
and  research  tools  for  his  company's 
staff  at  hundreds  of  corporate  offices 
around  the  world.  He  and  other  cor- 
porate information  buyers  from  Ford 
Motor  Company,  Fidelity  Investments, 
Arthur  Andersen,  and  Xerox  Corpora- 
tion spoke  at  length  about  their  needs. 
What  are  they  looking  for? 
•The  ability  to  harness  data  and  make 
it  useful  internally  at  the  end-user 
desktop  level. 

•  Standards  for  the  content  format  that 
are  generic  and  relatively  easy  to  ma- 
nipulate, i.e.,  XML. 


•  Integration  of  external  and  internal  in- 
formation — to  be  able  to  access  outside 
and  inside  data  at  the  same  time  for  an 
all-round  value. 

•  The  ability  to  do  full  information  track- 
ing for  valuation  metrics  —  unique 
visitors,  page  views,  strategic  files.  This 
is  crucial  for  future  funding  by  proving 
return  on  investment. 

•  Cost-effective,  win/win  pricing 
arrangements. 

Clare  Hart,  CEO  of  Dow  Jones'  new 
incarnation  as  Factiva,  sitting  on  a  panel 
of  content  buyers  and  sellers,  said  one 
of  Factiva's  main  goals  is  to  provide  the 
technical  integration  their  clients  want. 
Factiva  will  begin  to  offer  routine  on-site 
technical  consulting  and  assistance. 

Dr.  Robert  Schwarzwalder,  manager 
of  Library  Systems  and  Information  at 
Ford  Motor  Company,  says  information 
vendors  need  to  know  that  at  the  corpo- 
rate level,  the  "idea  of  the  ubiquitous 
end-user  is  dead."  People  are  too  busy  at 
work.  He  also  says  that  corporate  infor- 
mation searchers  do  not  want  stand- 
alone information  products.  They  want 
products  people  can  learn  to  use  fast. 
The  days  of  the  2-hour  training  session 
to  learn  how  to  use  just  one  particular 
database  are  over. 

Robert  J  Hiebeler  and  Marsha  L. 
Fulton  of  Arthur  Andersen  Knowledge 
Enterprises  identified  the  basic  chal- 
lenges in  information  acquisition  that 
anyone  buying  information  for  a  group 
has  to  consider  all  the  time: 

•  The  company  culture  —  how  it  re- 
gards information. 

•  Keeping  the  acquired  content  up- 
to-date. 

•  Finding  out  where  duplicate  content 
may  reside,  as  well  as  looking  out  for 
alternate  sources. 

•  Continually  Finding  and  evaluating 
available  resources. 

•  Handling  cost  allocation. 

•  International  companies  have  the 
additional  overlay  of  finding  globally 
relevant  content,  and  dealing  with  many 
different  languages. 

•  Another  Outsell  slide  showed  what 
commercial  products  knowledge  work- 
ers were  using  these  days  (see  Figure 
2  above). 
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Little  was  mentioned  about  specific 
prices  at  the  conference,  but  many 
pricing  schemes  were  discussed.  Most 
of  these,  such  as  pricing  by  "seat,"  by 
number  of  sites,  by  number  of  ports,  as 
well  as  flat  rate  and  pay-per-use,  are 
fairly  common.  Some  corporate  infor- 
mation purchasers  suggested  an  en- 
terprise-wide license  as  an  option;  oth- 
ers actively  seek  creative  discounting, 
such  as  a  "major  account"  discount  or 
discounts  for  extended  contract  peri- 
ods. Some  buyers  can  make  rebates 
work  to  their  advantage  and  do  not 
necessarily  want  monthly  payment 
frequency.  Some  vendors  will  offer  a 
better  deal  for  annual  payment.  Pric- 
ing always  remains  a  negotiable  issue. 


Conclusion 

Ongoing  feedback  from  attendees 
and  some  revision  to  the  delivery  style 
could  improve  future  conferences.  In- 
teractive sessions  in  which  underlying  is- 
sues come  out  and  group  egos  can  bond 
in  a  safe  environment,  as  opposed  to  one 
PowerPoint  display  right  after  the  other, 
might  help.  The  available  brain  power 
and  advice  bank  are  enormous,  and 
there  is  total  availability  for  those  in- 
volved in  doing  business.  The  setting  was 
to  die  for,  but  there  were  less  expensive 
places  to  stay  just  a  short  drive  away. 

It  was  a  buyers  conference.  There  was 
little  identification  of  issues  particular  to 
the  original  content  producers.  At  the 
final  wrap-up  session  at  least  half  the  at- 
tendees were  not  in  the  room,  but  when 
asked  for  a  show  of  hands  by  people  rep- 
resenting content  providers,  nearly  the 
entire  remaining  audience  raised  their 
hands.  No  light  was  directed  at  their 
concerns  about  serious  partnership 
breaches  between  content  provider  and 
aggregator,  such  as  illegal  distribution  by 
aggregators,  or  finding  material  used  by 
third-  and  even  fourth-party  vendors  as 
loss-leaders,  known  popularly  as  "redis- 
tribution without  remuneration." 

Content  providers  were  told  they 
have  little  choice  about  dealing  with 
infomediaries.  They  were  asked  ques- 
tions like,  "Who  has  ever  heard  of  your 
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Conference  Corporate  Sponsors 


A  full  array  of  Internet  services  including  copyright  protection,  e-commerce 
e-content,  a  search  engine,  aggregators,  infomediaries,  financiers,  and  analysts 
were  represented. 

DigitalOwl.Com  (http://www.digitalowl.com):  "The  packaging,  marketing,  selling 
and  distribution  of  valuable  digital  content  wherever,  whenever,  and  in  whatever  form 
consumers  demand."  Provides  unique,  easy-to-use  digital  copyright  protection 
software  products  and  services  that  connect  to  any  reader  device  for  content 
providers  desiring  copyright  protection.  Founded  in  1999,  offers  full  encryption 
to  support  e-commerce. 

MediaExpress  (http://www.rnediaexpress.com):  Provides  real-time,  fully  customizable 
mixed  media  to  Web  sites.  Clients  can  specify  a  mix  of  subject  and  source  and 
purchase  continuous  feeds  of  content. 

Nielsen  Net  Ratings  (http://www.nielsennetratings.com):  From  Nielsen  Media 
Research,  ACNielsen,  and  NetRatings,  Inc.  Offers  audience  rating  services  that 
provide  information  about  how  people  use  the  Internet. 

Northern  Light  Technology  (http://www.northernlight.com):  Large,  authoritative,  and 
unique  Web  search  engine  that  also  taps  databases  of  stored  information  with  in- 
depth  retrieval  capabilities.  Appeals  to  more  serious  searchers.  Founded  in  1996. 

Online  Inc.  (http://www.onlineinc.com):  Publisher  of  Online,  Emedia,  and 
EContent  magazines.  Organizers  of  the  following  conferences:  Online  World  2000, 
DVD  PRO  2000,  eContent  2000,  Intranets  2000,  and  VirComm  2000. 

Outsell,  Inc..  (http://www.outsellinc.com):  Delivers  high-quality,  fact-based  research, 
analysis,  and  advice  about  every  aspect  of  content  strategy  and  information  use  with 
services  designed  for  both  information  buyers  and  suppliers  in  all  segments  of  the 
industry.  Consults  and  advises  about  effectiveness,  recommends  a  course  of  action 
based  on  measurement  data.  Founded  in  1994. 

QPass  (http://www.qpass.com/):  Calls  itself  "WD-40  for  the  Web."  Delivers 
e-commerce  services  to  any  Internet  company  wishing  to  offer  sale  of  goods  online. 
QPass  handles  e-commerce  for  a  number  of  well-known  Web  sites  and  services  such 
as  The  Wall  Street  Journal  Interactive  Edition,  Corbis,  l_ATimes.com,  Stat-USA,  The 
New  York  Times  on  the  Web,  Morningstar,  The  Industry  Standard,  and  others. 
Founded  in  1997. 

Screaming  Media  (httpyAvww.screamingmedia.com):  Harvests  content  from  Web 
sites  with  installation  of  proprietary  software  on  provider's  site.  Articles  feed 
via  preformatted  searches  to  a  large  client  base  of  subject-focused  Web  sites  and 
internal  intranets.  Founded  in  1993. 

Veronis,  Suhler,  &  Associates,  Inc.  (http://www.veronissuhler.com):  Financial 
advisors  to  the  communications  industry.  VS&A  specializes  in  mergers  & 
acquisitions,  sale  of  media  properties  and  companies,  joint  ventures,  and 
management  buy-outs.  VS&A  serves  companies  that  provide  original  content 
only,  not  redistributors.  Founded  in  1981. 
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publication  anyway?"  When  we  de- 
scribed experiences  of  open  violations 
of  partnerships  and  entrepreneurial 
contract  breaches  by  aggregators,  we 
were  told  about  the  stupidity  of  our 
contract  formulations.  The  best  sugges- 
tion I  heard  for  content  originators  try- 
ing to  stay  on  top  of  all  their  contracts 
is  to  examine  them  every  3-4  months. 


Usually  content  providers  learn 
about  contract  breaches  by  aggregators 
on  their  own.  For  example,  a  provider 
suddenly  discovers  the  aggregator  is  dis- 
tributing the  provider's  content  through 
30  other  distributors  without  men- 
tioning this  to  the  provider.  Usually 
the  discovery  stems  from  someone  in 
the  provider's  company  identifying  their 
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Glossary  oF  Jargon  and  Aphorisms 

Remember  "Roadkill  on  the  Information  Highway?"  Well,  here  are  some  replacements, 
since  we  all  got  pretty  tired  of  that  one: 

Aggregator  —  Purchases  original  content  and  bundles  it  together  with  like  kind  in 
one  uniform  standard  product.  £el|&  Howell  information  an.d. Learning,  for  instance, 
acquires  daily  content  of  over  fOO  newspapers,  formats  it  into  one  consistent  format, 
and  sells  it  to  a  variety  of  clients.  Some  aggregators  look  to  simplify  the  acquisition  of 
news  or  other  content. 

"Cash  and  potential  are  better  than  potential"  —  Inspiration  for  Web  start-ups  (Douglas 
Bennett,  EoExchange  Inc.). 

Content,  Commerce,  and  Community  —  What  has  to  occur  simultaneously  for  content 
to  be  worthwhile  on  the  Net.  See:  Vortal. 

"Context  is  King"  —  Content  has  been  deposed.  Internet  users  are  worn  down  from 
the  flood  of  information  that  came  their  way  in  the  early  days  of  fully  functioning 
search  engines. 

Distribution  without  Remuneration  —  Selling,  or  giving  away  free,  someone  else's 
content  and  not  paying  them  for  it. 

Disintermediation  —  Distribution  channel  that  rids  itself  of  the  middleman. 

Encyclopaedia  Britannica  —  Cited  more  than  once  during  the  conference  as  an 
example  of  why  brand  recognition,  important  as  it  is,  isn't  everything. 

Eyeballs  —  What  every  Web  site  wants  lots  of  all  the  time.  See:  Stickiness. 

Infomediary  —  Receives  original  content,  slices  and  dices  it  into  niche-focused  chunks 
for  distribution  to  vertical  markets. 

Integrator  —  Facilitates  the  distribution  of  content  within  an  organizational  structure, 
such  as  a  large  corporation's  intranet  or  into  a  Web  site's  interface  for  distribution. 

Internet  Nomad  —  Independent  (solo)  instant-gratification  Net  researchers,  get 
results,  buy  on  the  spot,  no  loyalty  to  previous  supplier  or  information  resource. 

Middleware  —  Integrative  software  that  makes  unlike  and  disparate  blocks  of 
data  compatible  and  readable  one  to  the  other,  or  on  a  separate  platform.  Examples 
of  popular  middleware  are  Cold  Fusion  and  Web  Objects. 

Stickiness  —  Whatever  attracts  people  to  a  Web  site  and  keeps  them  there,  e.g., 
the  way  some  search  engines  set  up  taxonomies  that  border  on  entrapment.  This  is 
desirable  for  some,  but  not  all,  sites.  Some  would  rather  have  eyeballs  to  count,  but 
prefer  not  to  have  users  hanging  out  on  their  servers  for  a  long  time. 

Syndicator—  Handles  original  distribution  or  redistribution  of  original  content,  often 
niche-  or  subject-focused.  MerlinNet  or  AllSport  are  examples  for  photo  distribution. 
Usually  comes  to  client  or  subscriber  in  a  package  that  can  be  used  all  or  in  part. 

Taxonomy  —  Uniform  language  for  site  content  and  organization. 

"Tsunami  —  What  the  Internet  is  now"  (Brewster  Kahle,  Alexa  Internet).  It  will 
change  our  lives  and  landscape  just  like  a  giant-sized  wave  that  cleans  things  up  and 
shifts  them  all  around. 

Vortal  —  Vertical  portal.  Kind  of  like  applying  the  Library  of  Congress  Subject 
Headings  to  researching  a  topic  on  the  Internet.  A  niche  focus,  like  a  listserv  with 
added  reference  resources. 

"(1)  Sex.  (2)  Food.  (3)  Save  Money."  —  Where  saving  money  stands  in  the  hierarchy 
of  needs  (Brewster  Kahle,  Alexa  Internet).  Also,  "Content  Is  Cake,  Not  Wine.  —  Only 
fresh  content  has  value"  (Doug  Bennett,  EoExchange  Inc.). 

"We  Suck  Less!"  —  A  great  way  to  discern  least  terrible  options  for  selling  content  if 
you're  a  provider. 


content  for  sale  on  a  Web  source  with 
which  they  do  not  do  business  and  then 
tracing  it  back  to  the  source.  The  aggre- 
gator immediately  offers  to  remove  the 
content  from  whichever  distributor  the 
provider  wishes.  In  so  offering,  there  is 
no  accountability  for  poor  communica- 
tion, or  what  some  term  outright  theft. 
"It's  the  ugly  little  secret  of  this  confer- 
ence," one  vice  president  of  a  major  tra- 
ditional search  service  told  me. 

The  only  content  provider  that  spoke 
was  the  huge  publisher,  Cahners,  which, 
with  an  array  of  publications  like  Daily 
Variety,  Broadcasting  and  Cable,  and 
Publishers  Weekly,  is  hardly  a  typical 
content  producer.  Corilee  Cristou, 
the  speaker  filling  in  for  Charles  Lillis, 
vice  president  of  Licensing  &  Brand 
Development  at  Cahners  Electronic 
Media  Group,  said  Cahners  has  at  least 
five  requests  for  content  redistribution 
every  single  day. 

The  conference  is  planned  again  for 
next  spring  at  the  Camelback  Inn.  Reg- 
istration for  the  executive  level  confer- 
ence will  be  limited  to  no  more  than  300 
people.  This  year's  registration  fee,  not 
including  travel  or  accommodations, 
was  $1,495. 

Despite  the  price,  this  conference  is 
an  ideal  gathering  for  people  who  buy 
and  sell  Web  site  content  for  external  or 
internal  use.  It  would  also  help  those 
who  want  to  get  a  better  idea  of  how 
e-content  is  segmented,  parceled  out, 
presented,  and  serviced.  Although  spe- 
cific pricing  is  not  mentioned  publicly, 
the  conference  provided  a  good  op- 
portunity for  both  buyers  and  sellers 
to  develop  pricing  strategies  through 
conversation  with  industry  experts. 
Searchers  looking  for  fruitful  resources 
might  not  take  to  the  conference,  even  if 
they  could  afford  it,  but  it  is  right  on  the 
cutting  edge  in  examining  future  trends 
in  content  distribution. 

For  more  information,  go  to  Online 
Inc.'s  conference  Web  site  at  http://www. 
onlineinc.com/econtent/index.html    * 

Cary  Kenney,  a  former  library  director 
and  news  researcher,  works  in  Web 
Publications  for  the  St.  Petersburg  Times 
in  Florida. 
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ales  of  a  cybersleuth 


Software  expert 
exposes  secret 
surveillance  of 
computer  users 


KNIGHT  NEWS  SERVICE 

Richard  M.  Smith  is  a  software  expert 
who  doesn't  fully  trust  his  own  kind.  So  he 
has  launched  a  personal  crusade  to  expose 
technology  practices  that  threaten  the  pri- 
vacy of  millions  of  Internet  users. 

The  retired  co-founder  of  a  maker  of 
specialized  software  for  industry,  he  has  a 
growing  reputation  as  one  of  the  Internet's 
premier  privacy  defenders.  He  has  essen- 
tially become  the  Techie  Avenger  for  mil- 
lions of  less  savvy  Internet  users  who  surf 
unaware  of  how  much  of  their  personal  in- 
formation is  silently  being  gathered. 

Mr.  Smith  has  unmasked  techniques  em- 
ployed by  some  of  the  Internet's  best 
known  companies  —  including  Microsoft 
Corp.  and  Real  Networks  —  to  invisibly  re- 
trieve information  from  Internet  users' 
computers  in  ways  those  firms  didn't  fully 
disclose  until  Mr.  Smith  raised  questions. 

He  discovered  that  software  made  by  a 
subsidiary  of  Amazon.com,  Alexajnternet, 
ostensibly  designed  to  help  Internet  shop- 
pers find  the  best  deals  and  product  infor- 
mation, also  secretly  gathered  personal  in- 
formation on  the  user. 

Mr.  Smith,  46,  filed  a  complaint  with  the 
Federal  Trade  Commission  after  discover- 
ing that  Alexa's  zBubbles  software  harves- 
ted information  about  his  activities  on-line 
and  transmitted  it  back  to  Alexa. 

Besides  his  e-mail  and  physical  address, 
Alexa's  software  surreptitiously  recorded 
his  sister's  phone  number  when  he  used 
his  computer  to  call  her.  It  noted  his  pur- 
chase of  a  Boston-to-Las  Vegas  airline 
ticket,  the  DVDs  he  considered  buying 
from  an  on-line  retailer  and  the  informa- 
tion he  typed  in  to  confirm  his  teenage 
daughter's  flight  home  from  Philadelphia. 

All  this  was  done  without  notice  to  him 
from  Alexa  that  his  personal  data  was 
being  retrieved,  he  said. 

"It  was  one  of  the  more  intrusive  pieces 


KRT  PHOTO 

Richard  M.  Smith  is  one  of  the  Internet's  premier  defenders  of  privacy. 


of  software  I've  ever  seen,"  said  Mr.  Smith. 
Said  Brewster  Kahle,  Alexa's  chief  exec- 
utive: "Our  users'  privacy  is  of  the  utmost 
importance  to  us,"  but  declined  further 
comment,  citing  the  complaint  that's  pend- 


ing before  the  FTC. 

Mr.  Smith  said  his  mission  is  a  simple 
one. 

See  PRIVACY,  Page  2  ► 


Privacy 


►  Continued  from  Page  1 


"I  want  to  show  how  much 
monitoring  is  being  done  so  we  can 
make  good  decisions  about 
whether  we  want  this  or  not,"  he 
said.  "If  we  talk  to  marketing  folks 
who  are  involved,  they  say:  'Oh, 
there's  no  problem  here.  It's  all  for 
your  own  good.  And  don't  ask  too 
many  questions.'  What  I  like  to  do 
is  ask  all  the  questions,"  he  said. 
The  Web  privacy  problem,  Mr. 
Smith  said,  has  two  fathers.  Inter- 
net companies  often  are  given  high 
stock  values  in  part  because  of  the 
personal  information  they  have  on 
current  and  prospective  custom- 
ers. So  there  is  great  incentive  for 
them  to  collect  such  data,  he  said. 
The  other  is  that  software  engi- 
neers by  nature  like  to  do  their 
own  thing.  Software  writers  "sort 
of  create  their  own  little  world  with 
software.  They  write  the  rules.  The 
last  thing  in  the  world  they  want  to 
be  told  is  what  to  do,"  Mr.  Smith 
said. 

He  foresees  legislators  eventu- 
ally passing  laws  that  tell  software 
companies  what  kind  of  informa- 
tion they  can  and  can't  "transmit 
up  and  down  the  wire,"  without  the 
users'  informed  consent,  as  well  as 
ethical  training  for  software 
developers,  he  said. 

Mr.  Smith  started  thinking  about 
Internet  security  years  ago  when 
he  ran  Phar  Lap  Software  Inc.,  a 
Cambridge,  Mass.,  firm. 

He  focused  mainly  on  software 
bugs  that  left  computers  vulnera- 
ble to  hackers  and  viruses.  It  was 
Mr.  Smith  who  last  year  uncovered 
the  name  of  the  Melissa  e-mail  vi- 
rus' creator,  David  L.  Smith,  and 
passed  it  along  to  authorities. 

A  year  ago,  he  turned  his  atten- 
tion to  Internet  privacy.  The  con- 
troversy over  Intel  Corp.'s  plan  for 
a  serial  number  in  its  Pentium  III 
microchip  processors  that,  theo- 
retically, would  make  possible  trac 
ing  millions  of  computers  over  the 
Internet,  made  him  wonder  what 
other  tracking  might  already  be 
nrmrring.. 

He  found  that  Microsoft  Word, 
the  nation's  most  popular  word 
processor  program,  embedded  a 


hidden  electronic  identifier,  unique 
to  each  computer,  on  Word  docu- 
ments. 

That  globally  unique  identifier, 
as  it  is  called,  was  sent  back  to 
Microsoft  when  consumers  regis- 
tered their  Microsoft  software,  Mr. 
Smith  learned.  r* 

Thus,  the  personal  information 
people  provided  upon  registration 
could  theoretically  be  linked  to  a 
particular  document  written  in 
Word. 

"I  said  'Holy  cow,  this  is  bad,' " 
Mr.  Smith  recalled.  "Not  that  any- 
body was  using  all  this  stuff,  but 
this  interesting  little  surveillance 
system  was  all  in  place"  if  ever 
someone  wanted  to  use  it. 

Mr.  Smith  contacted  Microsoft. 
The  Redmond,  Wash.-based  soft- 
ware giant  "right  off  the  bat  real- 
ized this  was  not  a  good  situation," 
Mr.  Smith  said.  The  company 
stopped  new  versions  of  its  soft- 
ware from  stamping  documents 
with  the  unique  numbers. 

Carol  Sacks,  a  Microsoft  spokes- 
woman, said,  "The  fact  is,  Richard 
is  a  technical  expert,  and  we 
respect  what  he  does.  We  believe 
[his  efforts]  are  intended  to  help 
strengthen  consumers'  privacy 
protection,  and  this  is  an  impor- 
tant issue  to  all  of  us." 

Last  October,  Mr.  Smith  found 
software  by  Real  Networks,  the 
Seattle-based  company,  doing 
something  similar.  Real  Networks' 
software  compresses  and 
decompresses  large  sound  and 
video  files  for  transmission  over 
the  Internet. 

Another  feature  of  the  com- 
pany's Real  Jukebox  software  al- 
lows people  who  listen  to  compact 
discs  on  their  computers  to  trans- 
fer music  from  the  discs  to  their 
hard  drives. 

Mr.  Smith  detected  that  when  he 
placed  a  CD  into  his  computer,  the 
Real  Jukebox  software  automati- 
cally transmitted  his  machine's 
unique  identifier  and  his  musical 
selections  to  Real  Networks. 

Since  Real  Networks  had  his 
name  and  other  personal  informa- 
tion from  his  registration,  "it  put 
them  in  a  position  of  being  able  to 
build  a  database  of  what  CDs  I  was 
listening  to,"  Mr.  Smith  said.  He 
alerted  the  media  and  a  contro- 
versy ensued.  In  response,  Real 
Network  disabled  the  technology. 
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Going  public  for  privacy 


Crusader  forces 
intrusive  Interj  let  |    * 
firms  to  change  ^v 

By  FRANK  JAMES 
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Richard  M.  Smith  is  ii  softv.  are 
exp<  rt  who  doesn't  fully  trust  his 
own  kind.  So  he  has  launched  h 
crusade  to  expose  technology 
practices  that  threaten  Ihe  privacy 
of  millions  of  Internet  users. 

The  retired  co-founder  of  a 
makei  of  s;ieciali- eel  software  Tor 
industry,  he  has  a  growing 
reputation  as  one  of  the  Idem  it's 
premier  privacy  defenders.  He  has 
essentially  become  tlie'fechie 
Avenger  for  millions  of  Internet 
users  who  surf  unaware  of  hov 
much  of  theirpersonal  information 
issii-nUybeinzgMhereA 

Smith  has  unmasked  techniques 
employed  by  some  of  the  Internet's 
best-known  companies  — 
including  Microsoft  Corp.  and 
RealNetworks  —  to  invisibly 
ie<rii"'CirJ'vmatit>RfminInlr<  lei 
users'  computers  In  ways  (hose 
rirms  didn't  fully  disclose  until 
Smith  raised  questions. 

Hr  discovered  ( hat  software 
made  by  a  subsidiary  of 
Amarcn.com.  .Ve  2 [me/net. 
ostensibly  designed  to  help 
Internet  shoppers  iind  the besl 
deals  .md  product 
al«>>-Cl£tl-  $.>th 
inforniatior 


the  Fedeial  Trade  Cor  tmisMun 
afier  discovering  thai  VJexa  s 
ztiubbles  softv.  ure  harvested 
■Manaoas  about  Ins  uctn  rites 
online  and  transmitted  it  to  Alexa. 
►iesiues  iu's  t  ■mail  ..nd  ph,  sicai 
address.AJexa  ssoftware 
sui  repliliously  I  ecoi<l;d  his  sister's 
phone  numbei  when  he  used  his 
HnhiuKui  tlliUUlII  her  It  note-tins 
puichaseof  a  Uoston-lo-Las  Vegas 
airlineticket.ttvDVDshe 
considered  buy  ing  from  an  online 
relailerandthc  inforrration  he 
lyiied  in  lo  conlirm  his  daughtei  's 
fiijihtliome  tro-u  Philadelphia. 

-\Jl  this  was  done  without  aotice 
in  .nAie>.uih;...iit,peisona!dala 
was  being  retrieved  'It  was  one  of 
the  more  inlivsive  pieces  ol 
software  I've  ever  seer.,''  he  said. 
iaklBiew.su-.KuhHAIe.as 
chiel  executive  'Our users' privacy 
iSi.ttheu'.mosi  importance  to  us,' 
but  declined  further  comment. 
His  mission,  .aid  Smith,  i  >  a 
simple  one.  "I  want  to  show  now 
miichniomtjjri.igisbemgiioiieso 
we  can  make  good  decisions  about 
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who  are  involved,  they  say: 'Uh. 
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50.    an  good.  .And  dontaek  tou 
many  questions.' What  I  like  to  do 
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How  it  starts 

I  he  Web  privacy  problem, 
Smith  said,  has  1 wo  fathers. 
Internet  companies  often  ar,  given 
high  slock  values  in  part  because  ot 
the  infoi mation  they  have  on 
current  and  prospective  customers. 
So  1  here  is  incentive  for  them  to 

c^ohectsac-hdau'..  he  said. 

'   -i    «-,  ptl  er  is  I  hat  software 
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■  ■gislat: 
laws  thai  tell  so 

what  kino  of  in' 
and  can't  Iran  ,mit  up  and  clown 
the  wire,  "without  the  users' 
Informed  cons,  rtf,  as  weU  as  ethicai 
training 'for  soliware  developers, 

Smith,  who  s'ls  on  tie  Federal 


I,   del.ommrs  1011  s Advisvry 
Committee  on  1  Inline  Access  and 
St  airily,  started  thinking  about 
Internet  security  years  ago  when 
hi  rata  Phar  Lai;  Software  tin:.,  a 
Cambridge.  Mass.,  tii  m  named  lot- 
He  focused  mainly  on  software 
bugs  that  left  computers  vulnerable 
to  hackers  and  viruses.  Smith  last 
year  uncovered  the  name  ol  die 
Melissa  e-mail  virus'  creatoi  and 
or,  .sed  it  ilong  10  sulhoririe  . 
Ayearago,  he  turned  his 
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He  found  that  Microsoft  Word, 
ih.  ftkfc  i  voi;liitoces,3rm;^-rarn. 
ei.  1  bedded  a  hi.  Iden  electronic 
identifier,  unique  to  each 
ctimpuler,  on  Word  documt  uts. 


't'haiglobalh    nique- ide.e  'lie 
asit  is  called,  wassent  back  to 
Microsoft  when  consumers 
registered  their  Microsoft 
A  earned 

Thus,  information  provided 

cmldbel.nkedioa  particular 
dot  umein  wi  itti  ;i  in  Word- 
Smith  contacted  Microsoft. 
wlv.  inightofl  .  he  bat  realized 
the  was  not  a  good  situation,' 
Smith  said.  The  ompeny  stoppe 
nev.  versions  of  its  software  fi  orr 
slamping  documents  with  the 


RiCwird  is  a  kcrn'rcvi!  expert,. trie 
we  respect  what  lie  does.  We 
believe  |hisefforis|  are  intended  1 
help  strengthen  consumers' 
priiicy  protection,  and  this  is  im 
important  issue  to  all  of  us." 

Forcing  change 

List  October,  Smith  found 
software  by  RealNetwoi  ks  doing 
som  thing  similpi .  Rea.Netv..,, ks 
software  compresses  and 
dec  .nnie:.-.es-  la  ,;c  soundarrd 
video  files  for  transmission  over 

Another  featute  of  the 
mm,  eny's  RealJukebox  software 
allows  people  who  listen  to 

'i-eiiin .hcirconipu  33 
lo  transfer  music  1  rom  the  discs  to 
their  iiard  drives. 

Smith  detected  that  when  he 
plac -u  a  CD  mm  his  comouter  :ce 
Real  >ukeho\  soft-are 


"il  put  them  in  1  position  of  being 
ai  le  10  build  a  1  latabase  of  what 
CDs  1  was  listening  to,""  Smith  said. 
He  told  the  media,  a  controversy 
ensued,  and  RealNetworks 
disabled  the  technology. 

RealNetwoi  ks  didn't  challenge 
Smith's  facts,  just  his  conclusions. 
"I  le  seemed  to  assume  that . . . 
R-  a!is.etworks  -.eas  memitoiiug, 
and  that  was  not  the  case,"  said 
A:ki, .viovti , ,i  iie.ih\\-twor  res 
spokesman. 

When  Smith  went  public 
RealNetworks  iiad  alreadv  planned 
.1  uiiv.aietiMoslijpthe 
liensmiringoi  the  personal 
ir.ioi  .r.aiiun .  11;.  lupuate  its  pnvatv 
policy,  Mayer  .--aid.  Smith  had 
ci  ilicized  the  pi  ivacy  policy  posted 
on  thecompanv's  Website  for  not 
u.enliomngtlu  practice. 
"What's  interesting  tome  is 
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sunshine,  companies  seem  1 
immediately  slop  doing  it,"  Smith 
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1  getting  a  lot  of 
calls  from  lawyers  Ihese days," said 
Smith,  who  refuses  to  be  an  expert 
v.,,i,tssi.i  pkiinnlis,  11  would  taint 
his  efforts,  he  said. 

He  is  a  paid  t  onsultant  on 
Internet  privacy  issues  loan 
unnamed  company.  While  he  has 
made  enough  money  1 0  be 
comfortable,  he  doe's  not  have  the 
wealth  of  some  interne! 
entrepreneurs  "I'm  kind  ot  jealous. 
I  cm  only  retire  for  a  year,"  he  said 
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Thursday,  June  29,  2000 

Explorer's  Alexa  Aids  Search  for  Web  Sites 

Q:  Is  there  a  way  to  find  related  links  to  Web  pages  that  have  the  kind 

of 

content  I'm  interested  in? 

--Armando  G. ,  San  Gabriel 

A:  If  you  use  Internet  Explorer  5  or  newer,  you  can  take  advantage  of  a 

huge 

database  called  Alexa.  A  free  service  that  finds  and  ranks  Web  sites, 

Alexa 

can  lead  to  better  search  results  than  you  might  get  using  regular 

search 

engines.  To  use  Alexa,  just  open  any  Web  page  in  Internet  Explorer  and 

click 

on  Tools  and  then  on  Show  Related  Links . 
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Amy  Vecchione 

VP  of  Marketing  &  Business  Development 

Alexa  Internet 

Presidio  PO  Box  29141 

San  Francisco,  CA   94129 

(415)  561-6934;  (415)  561-6795  (fax) 
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pc  expo  NEW  YORK--A  recent  analysts  report  that  sent  Amazon.com's  stock  tumbling  to  ; 
52-week  low  was  "incorrect,"  chief  executive  Jeff  Bezos  said  today. 

"We  have  about  $1  billion  in  cash  reserves  and  expect  to  generate  cash  flow  from  operations"  in 
the  near  future,  he  said  in  his  keynote  address  at  PC  Expo. 


Last  week,  a  report  by  a  Lehman  Brothers  analyst  expressed  concern 
about  Amazon's  cash  reserves,  sending  the  stock  down  19  percent  to 
a  new  52-week  low  of  $33.78. 

Amazon  shares  rallied  earlier  this  week  after  several  other  analysts 
rushed  to  counter  last  week's  negative  outlook  by  Lehman.  Still,  the 
stock  is  down  more  than  33  percent  for  the  month. 

Bezos  declined  to  say  when  the  entire  company  would  be  profitable.  Only  the  books  unit  posted  a 
profit  in  the  fourth  quarter  of  last  year  and  in  the  first  quarter  this  year. 

Still,  Bezos  took  the  "Amazon  bashing"  in  good  spirit,  joking  that  some  have  suggested  renaming 
the  company  "Amazon.org"  because  it  is  clearly  "a  not-for-profit  company."  Others  suggested 
"Amazon. con"  and  "Amazon.toast,"  he  said. 

Bezos'  appearance  at  PC  Expo  once  again  underscored  how  the  show,  and  the  PC  industry  in 
general,  is  no  longer  obsessed  with  the  feeds  and  speeds  of  the  desktop  box,  but  instead  with  the 
entire  computing  experience.  PC  makers  are  converting  themselves  into  Internet  service 
providers  and  consulting  and  services  firms  that  also  sell  hardware,  while  companies  like  Amazon 
are  becoming  trusted  partners  in  product  development. 

Two  years  ago,  then-Compaq  chief  executive  Eckhard  Pfeiffer  and  Novell  chief  executive  Eric 
Schmidt  were  featured  speakers.  This  year,  Bezos  and  Handspring  founder  Jeff  Hawkins  spoke. 

The  spotlight  on  Amazon  at  PC  Expo  comes  at  a  time  when  the  entire  e-tailing  sector,  once  a 
Wall  Street  darling,  has  been  rocked  in  recent  months  as  analysts  and  investors  have  suddenly 
pegged  the  e-commerce  players  as  "retailers"  rather  than  technology  plays.  Successful  e-tailers, 
they  argued,  have  the  same  business  issues  as  brick-and-mortar  stores,  including  inventory 
management,  distribution  and  customer  relations,  and  should  therefore  be  valued  as  retailers. 

The  list  of  casualties  includes  layoffs  at  Furniture.com,  Living.com,  EMusic  and  PlanetRx.  The 
carnage  also  includes  the  outright  shuttering  of  stores;  Oxygen  Media  closed  two  of  its  shopping- 
related  Web  sites  for  women,  and  toy  retailers  Toysmart  and  RedRocket  recently  met  their 
demise. 

While  many  analysts  consider  Amazon  immune  to  some  of  the  sector's  turbulence,  the  Seattle- 
based  e-tailer  has  had  its  share  of  trouble.  In  January,  Amazon  announced  its  first  major  layoffs. 

Personalization,  or  the  tailoring  of  people's  online  shopping  experience  based  on  previous 
purchases,  could  invigorate  Internet  shopping  and  build  consumer  loyalty,  Bezos  said  today.  He 
demonstrated  Amazon's  "Trusted  Friends"  technology  using  his  own  personalized  Amazon  page. 

Amazon,  one  of  the  few  e-tailers  offering  personalization  services,  is  hoping  that  personalization 
will  encourage  shoppers  to  return  to  its  site  more  often  and  to  make  more  frequent  purchases.  So 
far,  however,  most  e-tailers  that  offer  personalization  have  been  plagued  by  technology  issues 
and  privacy  concerns. 


Bezos  defended  the  systematic  collection  of  shoppers'  buying  histories,  although  he  admitted 
there  is  no  way  an  e-tailer  can  reasonably  guarantee  100  percent  safety  of  data.  He  said  Amazon 
will  hold  on  to  information  "forever,"  insisting  that  the  more  data  it  has,  the  better  shopping 
experience  the  company  can  offer  to  an  individual.  He  also  downplayed  how  critical  the  collected 
information  would  be  to  most  others. 

"We're  not  talking  about  medical  records  or  financial  records;  we're  talking  about  consumer 
purchases,"  he  said. 

The  company  is  already  embroiled  in  some  privacy  battles  with  its  Alexa  Internet  unit,  the  subject 
of  both  an  inquiry  by  the  Federal  Trade  Commission  and  two  lawsuits  over  alleged  privacy 
violations. 


Amazon.com  shares  hit  new  52-week  low 

By  Sam  Ames  and  Troy  Wolverton 
Staff  Writers,  CNET  News.com 
June  23,  2000,  2:05  p.m.  PT 

update  Shares  of  e-commerce  giant  Amazon.com  plunged  19  percent  today  as  three 
respected  analysts  expressed  concern  about  revenue  growth  and  dwindling  cash 
reserves. 

At  the  close  of  regular  trading,  Amazon  was  down  $8.13  to  $33.78--a  new  52-week  low.  At  one 
point,  the  shares  dipped  to  as  low  as  $32.50.  Volume  reached  51 .7  million  shares,  making  it  the 
most  actively  traded  stock  of  the  day. 

Among  the  news  that  troubled  investors  was  a  dire  report  by  Ravi  Suria,  a  convertible  debt 
analyst  at  Lehman  Brothers. 

Amazon's  credit  is  "extremely  weak  and  deteriorating,"  Suria  wrote,  adding  that  investors  should 
be  wary  of  the  company's  bonds. 

"We  believe  that  the  combination  of  negative  cash  flow,  poor  working  capital  management,  and 
high  debt  load  in  a  hyper-competitive  environment  will  put  the  company  under  extremely  high 
risk,"  Suria  wrote. 

The  pessimism  that  swamped  Amazon's  shares  spilled  over  into  other  Net  giants.  Shares  of 
online  auction  company  eBay  were  down  $4.31  to  $53.88,  Priceline.com  shares  dipped  $3.50  to 
$41 .81 ,  and  Yahoo  shed  $6.38  to  $1 25.31 .  All  are  well  off  their  52-week  highs. 

The  carnage  is  the  latest  example  of  Wall  Street's  aversion  toward  profitless  "new  economy" 
stocks.  Just  last  year,  Time  magazine  named  Amazon  chief  executive  Jeff  Bezos  its  "Person  of 
the  Year,"  and  many  e-commerce  stocks  were  trading  at  record  highs. 

But  this  year  has  read  more  like  a  Stephen  King  novel  than  a  glowing  magazine  profile  for  Bezos 
and  his  Seattle-based  company. 

With  today's  decline,  Amazon  shares  have  plunged  70  percent  since  reaching  a  12-month  high  of 
$113  on  Dec.  9.  During  that  period,  the  company's  market  capitalization  has  also  sunk,  from  $60 
billion  to  $11.9  billion. 

Amazon  announced  its  first  major  layoffs  in  January.  In  addition,  the  company's  Alexa  Internet 
unit  is  the  subject  of  both  an  inquiry  by  the  Federal  Trade  Commission  and  two  lawsuits  over 
alleged  privacy  violations. 

Amazon  has  also  drawn  flak  for  its  recent  patent  on  its  affiliates  program,  with  critics  charging  that 
the  company  would  impede  Web  business  by  patenting  obvious-and  widely  used-technology. 

Amazon  itself  is  the  subject  of  a  patent  suit  by  Intouch,  which  charges  that  the  e-commerce  giant 
has  violated  a  patent  on  a  method  to  preview  prerecorded  music  samples  over  the  Internet. 

In  addition  to  Suria's  report,  investors  were  spooked  today  by  comments  from  two  other  well- 
known  analysts. 


According  to  Reuters,  Morgan  Stanley's  market-moving  analyst  Mary  Meeker  said  she  sees  "no 
upside"  and  "modest  downside"  to  her  second-  and  third-quarter  revenue  estimates  for  Amazon 
and  sees  no  catalysts  for  the  stock  "until  they  make  or  break  the  December  quarter." 

In  a  recent  report,  Merrill  Lynch  analyst  Henry  Blodget  also  said  he  does  not  see  much  "upside  to 
our  second-quarter  revenue  estimate  of  $585  million."  He  attributed  this  to  a  "slowdown  in 
general  consumer  spending  as  the  economy  begins  to  slow"  and  "a  slowdown  in  the  consumer 
Internet  industry." 

At  least  one  analyst  disputed  Suria's  conclusions  and  defended  Amazon.  "With  respect  to  a  weak 
balance  sheet,  poor  working  capital  management,  and  negative  operating  cash  flow,  (Suria)  got 
this  numbers  dead  wrong,"  J. P.  Morgan  analyst  Tom  Wyman  said  in  an  interview. 

Suria  "should  go  down  the  hall  and  talk  to  the  e-tailing  analyst  and  see  how  an  Internet  e-tailing 
model  works,"  he  said. 

To  fund  its  continuing  operations,  Amazon  has  racked  up  about  $2.1  billion  in  long-term  debt. 
Much  of  that  came  from  two  different  convertible  bond  offerings.  Last  year,  Amazon  raised  about 
$1.25  billion  in  debt.  Earlier  this  year,  the  company  raised  about  690  million  euros  ($646  million) 
in  a  separate  debt  issue. 

As  with  most  convertible  bonds,  Amazon  has  the  right  to  call  the  notes  and  force  investors  to 
convert  their  notes  for  shares  of  its  stock-if  it  maintains  a  certain  stock  price  for  a  certain  amount 
of  time.  For  its  U.S.  debt,  Amazon  can  call  the  10-year  notes  for  stock  if  the  company's  stock 
trades  above  $1 17.04  per  share  for  20  out  of  30  consecutive  trading  days. 

When  Amazon  issued  the  debt,  the  market  for  e-commerce  stocks  was  flying,  and  it  looked  like 
the  company  might  be  able  to  call  the  notes  right  away.  That  no  longer  seems  to  be  the  case.  In 
the  meantime,  Amazon  will  have  to  make  semiannual  debt  payments.  The  company  made  its  first 
$29.7  million  debt  payment  on  its  U.S.  note  last  August. 

Financial  analyst  Jeetil  Patel  of  Deutsche  Bank  Alex  Brown  said  Amazon's  debt  is  not  something 
investors  should  worry  about.  Despite  the  debt,  Amazon  has  enough  cash  reserves-about  $1.1 
billion-to  last  until  it  reaches  profitability,  he  said. 

What's  hurting  Amazon's  stock  is  that  the  company  is  beginning  to  look  more  and  more  like  a 
traditional  retailer,  Patel  said.  During  the  first  quarter,  Amazon  experienced  its  first  sequential 
Quarterly  decline  in  sales,  one  of  the  first  indications  that  it  will  be  subject  to  the  same  seasonal 
demands  as  a  Wal-Mart  or  a  Sears. 

During  the  fourth  guarter  last  year,  Amazon  took  a  $39  million  charge  in  inventory-related 
experiences,  meaning  that  despite  its  high-tech  facade,  the  company  could  face  the  same 
inventory  pressures  that  haunt  offline  retailers. 

Investors  who  bought  Amazon  shares  because  they  thought  it  was  a  high-growth,  high-margin 
tech  stock  have  been  looking  for  an  excuse  to  get  out  of  it  now  that  it  is  beginning  to  look  more 
like  a  slow-growth,  low-margin  retailer,  Patel  said. 

"If  the  company  looks  and  acts  like  a  retailer,  albeit  on  the  Internet,  then  its  valuation  is  at  a  risk," 
Patel  said.  "We're  seeing  a  shift  from  tech  investors  to  retail  investors." 


Amazon,  others  add  personal  touch  to  home 
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Amazon.com  has  quietly  been  stepping  up  its  personalization  efforts,  offering  distinct 
home  pages  for  individual  customers  based  on  what  they  have  bought  in  the  past. 

Amazon  is  a  step  ahead  of  most  e-commerce  sites,  which  so  far  aren't  even  trying  to  tailor  their 
sites  to  individual  customers. 


"All  of  these  online  retailers  have  a  dozen  initiatives  or  more  they 
could  be  devoting  their  resources  to,"  said  Mike  May,  digital 
commerce  analyst  at  Jupiter  Communications.  "Merchants  constantly 
have  to  decide  whether  they  want  to  roll  out  personalization  and 

devote  the  time  and  money  necessary  to  deploy  it  or  any  of  a  host  of 

other  initiatives." 

For  years,  personalization  has  been  hailed  as  one  of  the  Holy  Grails  of  e-commerce,  promising  to 
encourage  customers  to  return  to  sites  more  frequently  and  buy  more  products.  But  that  promise 
has  run  into  problems,  such  as  a  lack  of  resources,  technology  constraints  and  privacy  concerns. 

"Few  sites  understand  who  their  customers  are  and  what  they  want,"  said  Paul  Hagen,  site 
design  and  development  analyst  at  Forrester  Research. 

Amazon's  personalization  strategy  has  taken  shape  most  noticeably  on  the  company's  home 
page. 

Earlier  this  year,  the  company  added  a  "new  for  you"  column  to  the  page,  using  it  to  recommend 
recently  released  books  and  videos  based  on  a  customer's  previous  purchases. 

Now  the  company  has  begun  changing  the  main  portion  of  its  home  page,  highlighting  a  "quick 
pick"  recommendation  based  on  past  purchases,  as  well  as  one  of  its  new  products.  For  instance, 
Amazon  recently  highlighted  the  Clint  Eastwood  movie  "Unforgiven"  for  one  customer  and  Aimee 
Mann's  "Bachelor  No.  2"  album  to  another  customer  instead  of  the  book  "Flags  of  our  Fathers," 
which  was  suggested  as  a  Father's  Day  gift  to  visitors  who  had  not  previously  registered  with  the 
site. 

Josh  Petersen,  manager  of  Amazon's  personalization  and  discovery  group,  said  the  e-commerce 
giant  is  running  a  test  on  the  placement  of  its  quick  picks  area.  Although  the  test,  which  began 
last  Thursday,  will  end  later  this  week,  Petersen  said  the  personalized  area  will  again  receive 
prime  placement  on  Amazon's  home  page  in  the  future. 

"Our  goal  is  if  we  have  20  million  customers,  we  should  have  20  million  stores,"  Petersen  said. 
"Quick  picks  is  just  one  step  in  that  direction." 

The  set  is  personalized  based  on  a  database  of  customers'  preferences  and  purchases.  Once  the 
company  knows  more  about  a  customer's  tastes,  the  site  can  suggest  new  items  that  fit  in  the 
same  mold. 
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"That's  what  personalization  is  all  about:  giving  me  something  that  I  didn't  know  to  ask  for,"  said 
Jonathan  Gaw,  an  e-commerce  analyst  at  International  Data  Corp. 

Other  companies  also  offer  personalization  services,  although  they  do  not  make  changes  to  Net 
surfers'  pages  automatically. 

Yesterday,  NBCi  said  it  will  relaunch  its  search  service  later  this  year,  offering  a  more 
personalized  version  for  visitors. 

Other  companies  with  similar  initiatives  include  Reflect.com  and  Yahoo,  which  allow  customers  to 
arrange  areas  of  their  sites  or  product  offerings.  But  those  require  the  customer  to  request  the 
changes,  as  opposed  to  Amazon,  which  makes  the  changes  based  on  a  sales  pattern. 

"It's  not  one  of  those  things  that  people  think  of  first,"  Gaw  said.  "When  they  are  creating  sites, 
personalization  is  not  top  of  mind." 

There  are  also  technology  problems.  Although  most  Web  sites  are  less  than  five  years  old,  it  can 
be  difficult  to  integrate  new  features  into  them.  eBay  and  Hotmail,  for  instance,  suffered  several 
outages  last  year  when  they  tried  to  add  new  features  to  their  respective  sites. 

"It's  hard  to  think  of  having  legacy  technology  issues  this  early  on,  but  people  like  eBay  do,"  Gaw 
said.  "You  don't  just  plug  personalization  in  like  a  toaster." 

Another  challenge  is  that  the  tracking  of  personal  purchase  information  and  Web  behavior  raises 
privacy  issues.  Amazon,  for  instance,  is  the  subject  of  a  lawsuit  and  an  inquiry  by  the  Federal 
Trade  Commission  over  the  use  of  personal  data  collected  by  its  Alexa  Internet  unit.  The  FTC  is 
also  investigating  online  marketer  Doubleclick,  which  has  been  hit  with  several  lawsuits  that 
allege  its  practices  violate  people's  privacy. 

The  privacy  issue  revolves  around  the  use  of  "cookies,"  which  are  placed  on  surfers'  computers 
to  track  them  across  the  Internet.  Advertisers  say  cookies  are  useful  in  keeping  track  of 
preferences  and  making  it  more  convenient  to  surf  the  Web,  but  privacy  advocates  say  they  are 
too  easily  corrupted. 

Still,  despite  the  problems,  analysts  say  that  as  the  growth  of  e-commerce  slows,  personalization 
will  become  a  higher  priority. 

"As  sites  shift  their  initiatives  away  from  acquiring  customers  to  retaining  customers, 
personalization  will  enjoy  a  renaissance,"  Jupiter's  May  said. 
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Bean  Counters  and  Salespeople 
„ft  Can  Get  Along 

software  that  automates  sales  compensation  improves  an  adversarial  relationship 


If  Bi;n  Torres  had  any 
doubts  about  his  company's 
new  sales  compensation 
application,  they  disap- 
peared just  weeks  after  the 
software  was  implemented. 

The  application,  TrueComp, 
by  Callidus  Software,  allows 
Torres,  a  sales  executive  for  a 
financial    information    com- 
pany, to  review  commissions 
prior   to    the    actual    payout. 
When  analyzing  commissions 
for  the  last  fiscal  quarter  he 
discovered  that  one  rep  was 
due   to  receive  an   unusually 
large  commission  because  of  a 
revenue  windfall  from  one  cus- 
tomer. The  payout  would  have 
caused  the  rep  to  earn  virtually 
no  commissions  the  rest  of  the 
year.  (The  company's  reps  are 
measured  against  past  perfor- 
mance and  the  rep  would  have 
been  unable  to  maintain  that  level  of  revenue  achievement  ) 
So  Torres  changed  the  pay  plan,  and  eliminated  the 
need  for  some  painful  conversations.  The  result:  Instead 
of  irritating  the  finance  department  with  an  abnormally 
large  expense,  he  now  has  a  tool  that  allows  him  to  bud- 
get expenses  more  accurately.  And  that  makes  bean  coun- 
ters happy.  "We  become  more  joined  at  the  hip  because 
we  have  a  common  ownership  and  information  resource 
that  we  both  rely  on,"  Torres  says. 

Sales  managers  and  finance  executives  joined  at  the  hip' 
Not  hkely  in  most  organizations.  Sales  managers  are 
focused  on  driving  performance,  while  finance  executives 
are  obsessed  with  the  cost  of  that  performance.  Combine 
that  with  the  real.ty  of  today's  marketplace,  in  which 
changes  m  customer  buying  patterns,  market  conditions 


and  business  models  wreak 
havoc  on  sales  compensation 
plans,  and  the  divide  between 
sales  and  finance  widens. 

The  reason:  Sales  compen- 
sation plans  are  traditionally 
managed  manually  with 
spreadsheets,  so  by  the  time  an 
error  is  spotted,  the  payout  has 
already  been  made.  "Worse,  if 
you  manage  a  public  com- 
pany's finances,  underaccruals 
of  variable  cost  liabilities  can 
surprise  public  markets  and 
punish  a  firm's  stock  price." 
says  Kevin  Strehlo,  vice  presi- 
dent of  product  marketing  for 
Callidus  Software,  in  San 
Jose,  California. 

Such  unpleasant  situations 
drive    finance   executives   to 
purchase  compensation  soft- 
ware—which  costs   approxi- 
mately $3(K),()0()  for  several 
hundred  users— that  allows  sales  managers  to  belter  mon- 
itor their  compensation  costs.  Nina  Mclntyre  vice  presi- 
dent of  worldwide  marketing  for  Incentive  Systems  Inc 
a    compensate    and    incentive    software    vendor    in 
Bedford,  Massachusetts,  recently  met  with  a  client  that 
overpa.d  its  channel  sales  team.  "The  [ spreadsheet-based | 
system  didn't  g.ve  the  company  accurate  data  on  how 
much  the  payments  would  be.  and  the  CFO  had  to  explain 
to  Wall  Street  why  the  system  drove  performance  way  out 
of    whack."    she    says.    Many    prospects    considering 
Incent.ve  s  application  have  inaccuracy  rates  as  high  as  M) 
percent.  In  fact,  Mike  Byers,  Incentive  Systems'  CEO 
once  heard  a  client  brag  that  it  had  95  percent  accuracy  on 
a  30  million  commiss.on  plan.  Try  explaining  that  dis- 
crepancy to  .your  CFO.  -Michele  Marchetti 
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PURCHASING 

Is  Buying  From 

A  Tech  Start-Up  Risky? 

Businesses  live  and  die  by  reputations  and  results,  and 
start-up  companies  often  have  neither.  So  how  do  you 
determine  whether  a  new  vendor  will  meet  your  com- 
pany's needs,  as  well  as  be  around  a  year  from  now? 
By  asking  the  right  questions.  Careful  querying  can  mitigate 
the  risk  of  partnering  with  an  emerging  company — and  any 
smart  start-up  executive  should  expect  a  thorough  grilling. 

Rick  Knoll,  chief  financial  officer  of  Blue  Meteor,  a  six- 
month-old  Chicago-based  application  service  jprovider, 
admits  that  turning  potential  customers  on  to  Blue  Meteor's 
benefits  has  meant  being  in  a  constant  state  of  "proving  your- 
self mode." 

So  far,  the  company  has  been  successful:  With  two  beta 
customers  already  signed  on.  Blue  Meteor  appears  to  have 
the  right  answers.  Still,  convincing  prospects  of  the  com- 
pany's viability  isn't  easy,  as  prospects  ask  tough  questions 
about  the  company's  functionality,  scalability,  and  pricing. 
"Our  customers  want  to  know,  how  are  we  going  to  do  it?"  he 
says.  Then,  they  move  on  to  what  Knoll  calls  the  "touch- 
feely"  stuff — management  and  financial  queries. 

Questioning  a  company  about  its  financial  backing  may 
seem  bold,  but  should  be  expected  by  start-ups,  says  John 
Ncsheim,  author  of  High  Tech  Start  Up.  The  three  questions 
he  recommends  asking  are:  What  is  your  burn  rate  (the 
amount  of  cash  a  company  is  spending  every  month)?  How 
long  will  your  cash  hold  out?  And  finally.  Who  is  your  finan- 
cial backer?  "When  you  get  the  answers  to  those  three  ques- 
tions you'll  understand  much  more  about  the  start-up,"  he 
says.  "Second,  the  answers  to  those  questions,  in  everything 
from  body  language  to  'we  don't  talk  about  those  things,' 
will  tell  a  great  deal  about  the  quality  of  the  management  or 
lack  of  it." 

Knoll  can  vouch  for  that  scrutiny:  Potential  customers 
want  to  know  who  Blue  Meteor's  investors  are  and  how  well 
capitalized  they  are.  "Very  early  on  you're  leaning  on  the 
reputation  of  your  management  team  and  your  investors," 
he  says. 

Knowing  who's  running  the  company  you  might  do  busi- 
ness with  can  increase  the  odds  of  success,  because  you'll  be 
able  to  judge  through  regular  conversation  how  things  are 
going,  says  Erich  Almasy,  a  vice  president  of  Mercer 
Management  Consulting  who  is  based  in  Toronto.  "You'll 
have  a  much  better  idea  of  when  problems  start  to  come  up. 
[Also],  by  knowing  who's  inside  that  company  and  how 
they're  dealing  with  problems  you  get  a  better  idea  of  how 
successful  they're  going  to  be." 

For  companies  interested  in  buying  software  from 
emerging  companies,  Almasy  recommends  asking  how 
many  other  beta  customers  the  company  has;  if  there's  a 
user's  group  that  will  allow  you  to  participate  with  other 
companies  like  yours;  if  the  code  will  be  released  if  the 
firm  folds— so  that  you  can  continue  to  operate  your  prod- 
uct; and  if  they'll  commit  to  a  set  team  of  people  who  will 
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work  with  you  on  a  regular  basis.  "Those  are  all  normal 
safeguards  people  have  been  employing,"  Almasy  says. 

But  to  truly  mitigate  the  risk  of  doing  business  with  a  start- 
up company,  compartmentalize  that  risk.  For  example,  limit 
the  downside  of  a  start-up's  failure  by  not  having  your  entire 
sales  force  dependent  on  its  software.  Consider,  "where  can  it 
take  you  on  the  positive  side,  and  if  it  fails  where  does  it  leave 
you  on  the  negative  side?"  Almasy  asks. 

Doing  your  homework  before  you  sign  a  contract  with  a 
start-up  certainly  limits  the  risk,  yet  Blue  Meteor's  Knoll  says 
that  not  all  companies  have  sophisticated  methods  for  inter- 
viewing the  start-ups  they're  planning  to  buy  from. 
"Surprisingly,  we've  come  across  people  for  whom  it  was 
kind  of  a  haphazard  process,"  he  says.  "[But]  for  a  company 
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utting  Lite  Cycles 


We  all  know  that  there's  an  explosion  in  the  number  of  eCRM 
vendors  (eCRM  is  customer  relationship  management  soft- 
ware that  is  Web-based).  What  managers  are  wrestling  with 
is  how  this  boom  will  affect  their  businesses. 

The  benefits  of  eCRM  are  apparent.  For  companies  using 
it,  it's  easy  to  implement,  reduces  costs,  and  boosts  rev- 
enue. Customers  get  faster,  better,  and  more  personalized 
service,  and  multimodal  access  to  vendors.  This  makes  for 
happier  clients,  which  keeps  them  coming  back.  High-tech 
behemoth  Cisco  Systems'  customers,  for  example,  use 
online  self-service  about  75  percent  of  the  time;  the  com- 
pany has  a  97  percent  satisfaction  rating  and  a  20  percent 
decrease  in  service  costs  per  year. 

What  isn't  so  apparent  are  the  benefits  of  this  array  of 
new  vendors.  Using  eCRM  dresses  up  a  company  so  it  looks 
nice  for  customers  and  investors.  Some  people  dress  in 
designer  clothes,  some  wear  clothes  from  Kmart.  Different 
clothes  are  right  for  different  people;  different  eCRM  pack- 
ages are  right  for  different  companies.  There's  no  one  right 
way  to  do  it,  which  will  keep  the  explosion  going. 

But  there  will  be  a  shakeout.  We'll  see  more  and  more 
acquisitions,  and  some  failures.  As  the  number  of  eCRM 
vendors  increases,  it  will  widen  the  definition  of  CRM  to 
include  customer-centric  e-business.  This  is  where  we'll  see 
butting  life  cycles. 

CRM  giants  such  as  Siebel  Systems  and  Vantive  are  now 
in  the  top  of  the  growth  stage  or  beginning  the  maturity 
stage.  They're  spending  huge  sums  on  marketing  to  keep 
growth  going,  and  are  telling  customers:  Don't  worry,  we'll 
get  you  to  eCRM.  Meanwhile,  eCRM  vendors  are  just  begin- 
ning the  growth  phase.  They  want  to  be  seen  as  "the  future." 
This  butting  of  heads  among  vendors  will  cause  tension  for 
the  next  three  years;  customers  will  be  confused  as  a  result 
of  mixed  marketing  messages.  It  will  stay  that  way  until  CRM 
and  eCRM  are  completely  blended. 

Along  the  way  we'll  see  increased  customer-centric  atten- 
tion and  offerings.  More  and  more  companies  will  offer  bet- 
ter service,  more  customers  will  use  it,  the  companies  will 
get  a  better  name,  so  even  more  clients  will  use  them;  it  will 
be  a  self-propelling  cycle. 
— Barton  Goldenberg  (ism@ismguide.com),  annually  publishes 
The  Guide  to  CRM  Automation. 
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like  us— we  feel  like  we've  got  the  backup — we'd  much 

rather  deal  with  the  person  [who's  done]  due  diligence. 

get  everyone  comfortable,  and  get  on  to  doing  business." 

— Erika  Rasmusson 

INDUSTRY  INSIDER:  GEORGE  COLOMBO 

Polish  Your  E-mail  Etiquette 

REMEMBER  the  last  time  you  ordered  the  spinach 
quiche  for  lunch?  You  spent  the  afternoon  calling 
on  clients,  then  slopped  in  a  rest  room  before 
leasing  for  home  and  discovered  you  had  some 
green  stuff  lodged  between  your  teeth.  All  afternoon  you 
looked  like  an  idiot,  but  no  one  bothered  to  tell  you. 

Well.  1  hate  to  be  the  bearer  of  bad  news,  but  you  might 
have  a  similar  situation  on  your  hands  when  it  comes  to 
e-mail.  Lots  of  sales  and  marketing  professionals  who 
wouldn't  dream  of  allowing  a  less-than-professional  letter 
go  out  to  a  client  are  somehow  clueless  when  it  comes  to 
electronic  communication.  Part  of  the  problem  is  that  e- 
mail  has  an  etiquette  all  its  own.  If  you  ignore  the  (previ- 
ously) unwritten  rules,  you  may  as  well  be  walking 
around  with  green  stuff  in  your  teeth.  And,  believe  me.  no 
one  else  is  going  to  mention  it  to  you.  So  here  are  my  tips 
for  keeping  your  electronic  image  up  to  par: 
USE  A  MEANINGFUL  SUBJECT  LINE  When  a  busy  exec- 
utive can't  figure  out  what  an  e-mail  message  is  about 
from  the  subject  (particularly  if  the  sender  is  not  familiar), 
the  message  usually  gets  ignored  or  deleted.  And  don't  get 
cute.  II  your  subject  line  is  "Important  Message."  it  had 
belter  really  be  important — or  your  e-mails  might  never 
gel  read  again. 

BE  CONCISE  Shakespeare  observed.  "Brevity  is  the  soul 
of  wit."  In  a  business  environment  that  runs  on  Internet 
time,  it  is  also  the  essence  of  effective  communication. 
Your  client  or  colleague  doesn't  have  time  to  wade  through 
the  whole  novel.  Send  the  Cliffs  Notes  instead. 
STICK  TO  PLAIN  TEXT  Sure,  it  would  be  great  to  send  out 
magnificently  formatted  messages.  Unfortunately,  some 
mail  systems  choke  on  formatted  messages  and  you  have 
no  idea  what  kind  of  e-mail  system  your  reader  has.  Your 
beautiful  message  may  very  well  wind  up  a  disjointed 
mess.  Plain  text  is  the  lowest  common  denominator  in  the 
world  of  e-mail,  thus  the  best  bet.  Your  message  may  not 
look  quite  as  pretty  as  you  want,  hut  it  won't  look  worse 
than  it  did  when  you  sent  it. 

PAY  ATTENTION  TO  GRAMMAR,  SPELLING,  AND 
PUNCTUATION  I  know  that  it's  fashionable  among  Silicon 
Valley  digerati  to  disregard  everything  they  ever  learned  in 
English  class,  but  your  client  ma\  not  yet  have  risen  to  that 
same  level  of  "cool."  Grammar  and  punctuation  make  your 
message  more  easily  understood.  And  virtually  every  e- 
mail  program  today  has  a  spell  checker.  There's  no  good 
reason  not  to  use  it. 

RESIST  THE  TEMPTATION  TO  CIRCULATE  JOKES  You 
may  think  the  one  about  the  horse  walking  into  the  bar  is 
hysterical  (and,  hell,  I  probably  think  it  is,  too),  but  one  or 
two  of  the  people  on  your  distribution  list  will  think  it's 


stupid.  And  the  number  of  people  who  will  think  it 
enhances  your  professionalism  is  approximately  zero. 
AVOID  LARGE  ATTACHMENTS  If  everyone  in  the  world 
had  a  Tl  line,  this  would  not  be  an  issue.  But  your  most 
important  client  might  just  be  checking  his  e-mail  on  a 
dial-up  line  in  a  hotel  room.  He  won't  appreciate  your 
choking  his  system  with  a  file  that  lakes  \5  minutes  to 
download.  If  you  can,  use  a  hyperlink  to  a  Web  location 
that  has  the  same  information.  If  that's  not  possible,  at 
least  send  a  heads-up  before  transmitting  something  that's 
especially  large. 

THINK  BEFORE  YOU  SEND  Once  you  hit  the  "send"  but- 
ton, your  message  is  gone  for  good.  Never  send  an  e-mail 
when  you're  upset.  Instead,  store  it  in  your  oulbox  until 
you're  certain  that  you're  not  going  to  regret  what  you 
wrote. 

Keep  these  tips  in  mind  and  you'll  never  have  to  worry 

about  looking  professional.  And.  oh  yes,  check  your  teeth 

in  the  mirror  after  lunch. 

George  Colombo  (george@capturingcustomers.com),  president 

of  Influence  Technologies,  is  an  expert  in  e-business. 


DEALERS 

How  3M  Avoids 

Channel  Conflict  on  the  Web 

RATHER  than  COMPETE  with  resellers  for  online 
sales,  3M  has  discovered  a  way  to  help  build 
channel  partners'  Web  sales  while  building  its 
own. 
3M,  the  manufacturing  behemoth  in  St.  Paul. 
Minnesota,  is  working  with  its  resellers  to  create  e- 
showrooms — virtual,  cobranded  online  stores  that  help 
resellers  sell  more  oi  3M's  products.  "Our  goal  is  to 
help  | the  distributors]  sell  our  products  through  use  of 
these  e-showrooms,  which  we  can  easily  deploy  in  a 
few  days."  says  Paul  Mullaney.  e-business  manager  for 
3M"s  office  supplies  division.  "The  micrositc  has  lots 
of  information  in  it  and  tries  to  create  a  highly  engag- 
ing brand  experience." 

The  e-showrooms  provide  content  about  the  3M  prod- 
ucts that  the  distributors'  sites  have  no  space  lor. 
"Distributor  Web  sites  don't  provide  much  information 
about  the  products — it's  the  same  information  that  is  in 
their  paper  catalog.  Since  they  are  limited  on  space,  they 
can't  include  all  of  the  specific  information  we  can  provide 
on  the  Web.  where  we  can  take  advantage  of  space." 
Mullaney  says.  "The  e-showrooms  enable  us  to  provide 
the  end  user  with  the  appropriate  content  on  the  products 
and  | gives  us)  control  over  how  the  end  user  views  the 
product  and  facilitates  the  sale."  The  showrooms  are  built 
with  software  from  Exterprise  Inc..  in  Austin,  Texas,  which 
also  manages  and  hosts  them. 

Right  now  3M  has  an  e-showroom  in  place  for  its 
ergonomic  products  including  wrist  rests,  document  hold- 
ers, and  computer  screen  filters.  When  customers  enter 
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The  Monitor 


COLLECTING  INFORMATION  CAN  BE  EASY,  BUT  USING  IT  SOMETIMES  ISN'T.  Orlando  Sentinel  Communications  (OSC),  the  pub- 
lisher of  The  Orlando  Sentinel,  has  been  collecting  data  about  the  citizens  of  central  Florida  who  subscribe  to  the  newspaper  (and 
those  who  don't)  for  years.  But  the  information  was  stored  in  a  data  warehouse  with  an  interface  that  didn't  allow  OSC  marketers 
to  do  much  analysis  of  it.  They  could  look  at  individual  records,  but  creating  reports  about  segments  of  the  marketplace  was  diffi- 
cult and  time-consuming.  Then  OSC  implemented  PowerPlay  and  Impromptu,  business-intelligence  solutions  from  Cognos  Inc.,  that 
put  the  information  on  an  intranet.  So  far  OSC  has  trained  more  than  100  employees  to  use  the  system;  most  of  the  marketing 
managers  needed  only  an  hour  to  learn  how  to  create  reports,  which  can  be  used  to  design 
marketing  efforts  that  target  certain  customer  segments.  If  a  region  has  a  large  proportion 
of  households  with  teenagers,  for  example,  telemarketers  can  play  up  the  Sentinel's  edu- 
cation and  high  school  sports  coverage.  And  the  new  system  has  simplified  the  work  of 
those  marketers,  too.  "They've  been  thrilled,"  because  they  can  download  the  information 
directly  to  a  spreadsheet,  says  Chuck  Farraj,  OSC's  marketing  information  manager. 
"They've  been  dealing  with  paper  reports  from  the  legacy  system." 

ERICSSON'S  "VERY  POLITE  PUSH  TECHNOLOGY  is  going  to  help  marketers  target  their 
message  in  a  very  personalized  way,"  says  Barbara  Boyle,  global  marketing  manager  for 
Ericsson  Network  Systems  in  Richardson,  Texas.  In  late  February  Ericsson  expanded  its 
Mobile  Internet  Advertiser  (MIA)  service,  which  sends  targeted  ads  to  PCs  that  can  then  be 
viewed  online  or  offline,  to  mobile  communication  devices — cell  phones  and  PDAs.  Sure,  it's 
neat  technology,  but  will  anyone  really  want  ads  on  their  Palm  Vlls?  They  will  if  the  ads  are 
targeted  and  offer  valuable  information,  Boyle  insists.  For  example,  with  MIA,  basketball 
fans  could  get  messages  sent  to  their  cell  phones  with  the  latest  scores.  "The  next  thing 
that  will  be  happening  with  MIA  is,  say  you're  on  a  business  trip  in  New  York,  you  turn  on 
your  phone,  and  get  a  message  saying  Knicks  tickets  are  available,"  she  adds.  "It's  not  like 
somebody's  bombarding  you  with  stuff.  This  is  just  another  add-on  portion  that  offers  a 
service  you  really  want  to  have."  Maybe.  But  regardless,  MIA  won't  be  available  for  com- 
mercial use  until  sometime  in  the  third  quarter  of  this  year.  In  the  meantime,  basketball 
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MOBILE  INTERNET  ADVERTISER  CAN  PHONE 
USERS  WITH  REAL-TIME  ADS. 


fans  will  have  to  call  Ticketmaster  themselves. 

REPEAT  CUSTOMERS  GENERATE  75  PERCENT  OF  COMMUNITY  PLAYTHINGS'  REVENUE.  For  this  reason  the  manufacturer  of 
toys,  furniture,  and  playground  equipment  wanted  to  maximize  its  customer  relationships  to  ensure  repeat  and  referral  business. 
So  the  company  implemented  Onyx  Customer  Center.  Community  Playthings'  new  customer  database  helps  target  mailings  by  iden- 
tifying valuable  customers,  addressing  specific  and  timely  needs,  and  providing  a  shared  view  of  each  client  for  sales,  marketing, 
and  service.  The  result:  Mailing  costs  have  been  cut  by  $600,000,  while  return  processing  on  orders  has  been  reduced  from  two 
months  to  two  weeks.  "This  system  allows  us  to  focus  more  of  our  time  on  the  right  people:  the  customers,"  says  Rick  Burke, 
Community  Playthings'  contact  management  group  director.  "We  can  now  track  our  clients  as  individuals,  not  as  buildings  or 
companies." 

WOULDN'T  IT  BE  NICE  TO  HAVE  ONE  PHONE  NUMBER  FOR  YOUR  MANY  COMMUNICATIONS  DEVICES?  One  new  technology,  the 
voice-activated  Webley  assistant,  answers  incoming  calls  and  tracks  people  down  at  the  office,  on  the  cell  phone,  at  home,  or  in 
the  car.  "It  eliminates  voice-mail  hell  and  increases  productivity,"  says  Tiger  Beaudoin  of  Boomerang  Marketing,  an  avid  user.  Webley 
retrieves  faxes,  e-mail,  and  voice  mail  from  its  universal  inbox  at  any  time.  Or,  better  yet,  program  it  to  do  a  "call  blast" — an  incom- 
ing call  rings  all  your  phones  at  once.  You  can  even  spontaneously  set  up  a  conference  call  with  clients  or  sales  reps  around  the 
country  by  saying  just  a  few  names.  "Its  convenience  is  astounding,"  Beaudoin  says.  "We  save  a  lot  of  time  and  rarely  miss  an 
inbound  inquiry." 

HOW  MANY  TIMES  HAVE  YOU  READ  ABOUT  A  WEB  SITE  YOU'D  LIKE  TO  CHECK  OUT,  AND  THEN  FORGOTTEN  THE  URL? 

PlanetPortal.com  is  betting  that  happens  a  lot,  and  the  company  has  developed  hardware  to  connect  computer  users  to  Web  sites 
without  typing  in  addresses.  The  company's  WebRemote  Control,  which  it  plans  to  give  to  millions  of  consumers  for  free  later  this 
year,  attaches  to  a  keyboard  and  allows  users  to  access  sites  in  two  ways.  First,  a  series  of  buttons  are  permanently  preprogrammed 
to  take  users  to  sites  that  pay  PlanetPortal  for  the  space;  others  keys  can  be  set  to  the  user's  favorite  URLs.  Second,  a  SlideCard 
Reader  allows  users  to  swipe  a  card  through  a  slot  on  the  device.  Marketers  who  work  with  PlanetPortal  can  send  cards  to  con- 
sumers who  have  the  device,  perhaps  offering  special  promotions.  PlanetPortal  has  already  signed  agreements  with  companies 
including  OfficeDepot  and  Priceline.com  to  create  cards.  Market  penetration  is  clearly  the  key  to  success,  and  in  February 
PlanetPortal  announced  a  licensing  agreement  with  Chicony  Electronics  Company,  which  manufactures  more  than  20  million  key- 
boards  per  year,  to  develop  Web-enabled  keyboards,  perhaps  incorporating  the  SlideCard  readers. 
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that  showroom,  through  a  banner  or  a  hyperlink  on  the  dis- 
tributor site,  they  can  customize  the  type  of  information 
they  will  receive  by  choosing  what  type  of  user  they  are 
from  three  choices  provided:  a  moderate  computer  user,  an 
intensive  computer  user,  or  an  ergonomic  professional. 
Each  showroom  is  customized  for  each  of  the  three  types 
of  customer.  "We  have  different  levels  of  products  and 
highlight  the  appropriate  products  for  the  segment  they've 
chosen,"  Mullaney  says.  Each  showroom  incorporates  the 
distributor's  branding  with  3M's,  as  well  as  the  distribu- 
tor's product  numbers  and  pricing.  The  distributor  handles 
all  fulfillment  and  pockets  the  money  on  sales. 

3M  began  this  initiative  recently  with  United  States 
Office  Products'  e-commerce  division  (USOPnet.com). 
3M  plans  to  approach  all  its  channej_partners,  including 
Office  Depot  and  Staples,  with  the  e-showrooms. 

"We  worked  closely  with  [3M]  to  create  the  e-show- 
room  since  we  know  our  customers  best,"  says  Dipanjan 
Chatterjee,  director  of  marketing  at  USOPnet.com,  in  Des 
Plaines,  Illinois.  "It  brings  a  very  focused  set  of  products, 
services,  and  solutions." 

Chatterjee  sees  the  necessity  for  this  type  of  strategy. 
"3M  brings  the  information  and  we  bring  the  customers. 
The  customer  gets  3M's  expertise  in  ergonomics  and  our 
online  offerings — put  all  of  this  together  and  you  get  a 
win-win  situation  for  all  parties  involved." 

— Christine  Galea 

GUERRILLA  MARKETING 

Can  Customers  Browse 
Competitors  on  Your  Site? 

Imagine  shopping  on  your  favorite  e-commerce  site, 
ready  to  make  a  purchase  when  suddenly  a  bubble 
appears  on  your  screen  with  product  price  compar- 
isons. 
This  technology,  called  Zbubbles,  is  from  Alexa 
Internet,  which  became  a  subsidiary  of  Amazon.com  last 
year.  Now  being  beta  tested,  users  can  download  Zbubbles 
from  www.zbubbles.com.  Then,  whenever  shoppers  visit  a 
site  that  the  software  is  programmed  to  compare  against,  a 
small  "Z"  icon  appears  that  users  can  click  on.  A  bubble 
depicts  where  else  the  product  can  be  found — not-so-coin- 
cidentally  it  says  if  Amazon  sells  it — and  links  to  Web  sites 
that  offer  a  cheaper  price  or  better  product. 

Zbubbles  will  become  more  effective  as  the  user  base 
builds,  because  the  program  relies  on  shoppers  to  recom- 
mend the  best  prices  and  places  to  buy  products,  and  also 
allows  users  to  write  reviews.  Alexa  reports  that  so  far 
500,000  people  have  downloaded  the  software  since  the 
end  of  last  year.  "We're  getting  a  lot  of  feedback  on 
Zbubbles'  features,"  says  Dia  Cheney,  spokesperson  for 
Alexa.  "We're  still  testing  its  functionality  and  moving 
forward  with  changing  the  service  based  on  customer 
feedback." 

Cheney  wouldn't  comment  on  how  Zbubbles  might 
change  or  when  it  will  be  taken  out  of  the  testing  stage. 
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And  still  largely  untested  is  how  Amazon  will  use  the 
incredible  amount  of  data  collected  from  the  technology. 
In  order  to  post  recommendations,  shoppers  must  register 
and  provide  their  e-mail  address,  a  password,  and  a  user 
name.  Alexa  anonymously  collects  data  on  Web  site  usage 
and  traffic  patterns  and  can  continue  to  do  so  for  as  long 
as  the  software  is  installed  on  a  computer. 

The  bubble  also  tells  users  whether  an  item  is  available 
at  Amazon.com,  and  conveniently  allows  them  to  pur- 
chase it  from  Amazon  with  one  click,  without  leaving  the 
site  they're  on.  The  one-click  service  is  available  only  if 
the  user  is  buying  from  Amazon. 

A  point  of  debate  is  how  Amazon  competitors  are  react- 
ing to  their  sites  taking  a  bubble  bath.  Because  the  soft- 
ware is  run  from  the  user's  computer,  technically  Amazon 
isn't  tampering  with  anybody  else's  site.  Cleverly,  it's  up 
to  users  to  build  Zbubble  software  to  the  point  where  it 
compares  other  e-tailers  to  Amazon.  "It's  a  service  people 
seem  to  enjoy,"  Cheney  says.  "They  like  being  able  to  pur- 
chase from  Amazon  with  one  click  and  also  see  where 
else  [a  product]  is  available."  — Erin  Strout 

ADVERTISING 

The  Incredible,  Indelible  Banner 

Love  'em  or  hate  'em,  banner  ads  are  still  the  most 
common  Web  advertising  tools.  Yet  they  rank 
below  such  tactics  as  affiliate  programs  and  direct 
mail  when  it  comes  to  effectiveness,  as  cited  by 
Forrester  Research.  And  according  to  a  recent  study  con- 
ducted by  Jupiter  Communications,  the  percentage  of  vet- 
eran online  users  that  click  on  banner  ads  has  declined 
from  32  percent  to  28.  Does  this  mean  banner  ads  will 
become  obsolete? 

"Expectations  are  unreasonable  for  the  banner,"  says 
Paul  Entin,  president  of  EPR,  a  marketing  public  relations 
firm  in  Lambertville,  New  York.  'Tech  people  were 
designing  [banners],  but  techies  aren't  in  advertising.  The 
important  distinction  to  remember  is  that  the  banner  ad 
may  be  terrible  but  banner  advertising  isn't."  People  with 
advertising  and  marketing  experience  should  be  involved 
in  creating  banners  and  banner  ad  campaigns,  and  banners 
should  be  one  component  in  a  campaign  that  may  include 
e-mail  ads  or  sponsorships.  "People  got  so  caught  up  in 
click-throughs  that  they  forgot  the  key  to  advertising — to 
instill  a  subconsciously  positive  feeling  about  a  com- 
pany," Entin  says.  'Take  Ford:  They  put  ads  in  a  magazine 
but  don't  expect  you  to  go  out  to  buy  their  cars  instantly. 
They  want  to  make  an  impression  so  when  you  do  go  out 
and  buy  a  car,  'Ford'  will  be  imprinted  in  your  mind.  For 
some  reason,  advertisers  threw  the  rules  of  traditional 
marketing  out  the  window  once  the  Web  came." 

Critics  of  the  banner  ad  claim  that  the  bad  ones  have 
spoiled  it  for  the  rest.  "Banners  are  very  effective  in  cer- 
tain situations  and  ineffective  in  others,"  says  Scott 
Heiferman,  founder  of  i-traffic  in  New  York,  whose  pop- 
ular bulletin  board  bannerssuck.com  generates  a  signifi- 
cant number  of  hits  per  month — even  though  Heiferman 
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considers  the  site  something  fun,  not  to  be  taken  too  seri- 
ously. He  believes  that  if  banners  were  relevant  and  well- 
targeted,  people  wouldn't  tune  them  ouL  "[Marketers] 
need  to  be  aware  that  [many]  people  ignore  banners," 
Heiferman  says.  "The  point  of  marketing  is  to  break 
through  the  clutter;  it's  not  about  shoving  things  in 
people's  faces.  [Advertisers]  are  only  thinking  about  the 
bottom  line  most  times." 

So  should  marketers  trash  their  banners?  Some  industry 
insiders  say  yes,  citing  that  banners  may  soon  be  replaced 
by  other  modes  of  advertising.  "The  ROI  and  click- 
through  rate  of  banner  advertising  has  been  on  the 
decline — the  rate  in  the  U.S.  is  less  than  one  percent," 
says  Eugene  Lee,  managing  director  of  SurfGold.com,  a 
loyalty  program  provider  based  in  Singapore.  He  believes 
the  trend  will  be  to  move  away  from  banner  advertising 
and  toward  instantly  rewarding  surfers  for  accessing  ser- 
vices via  WAP-enabled  (wireless  application  protocol) 
mobile  phones.  "WAP  through  mobile  phones  has 
allowed  us  to  serve  more  targeted  ads  to  the  end  user, 
which  is  more  effective  advertising." 

Despite  all  this,  it  seems  that  the  banner  ad  indeed  has 
nine  lives.  "Banner  advertising  will  always  be  with  us," 
says  Glenn  Gow,  president  and  CEO  of  Crimson 
Consulting  in  Los  Altos,  California.  "But  the  banner  as 


we  know  it  will  diminish  over  time  and  will  become  more 
sophisticated.  They  will  dissolve  into  the  background 
while  advertising  by  personalization  will  be  more  main- 
stream." Heiferman  agrees.  "It's  a  fact:  Banners  are  never 
going  away.  Smart  marketers  will  just  find  another  way  to 
make  it  work — maybe  a  different  shape,  size,  or  format." 

—C.G. 

E-BUSINESS  SPOTLIGHT 

Eastman  Chemical  Draws 
Customers  Online 

IT  is  rarely  the  monarchy  that  leads  the  revolution,  but 
Eastman  Chemical  Company  would  like  to  be  the 
exception  to  that  rule.  The  $4.5  billion  Kingsport, 
Tennessee-based  company  is  leading  the  chemical 
industry — long  viewed  as  staid  and  conservative — into 
the  rapidly  changing,  high-tech  world  of  e-business. 

Eastman,  the  first  chemical  manufacturer  to  launch 
e-commerce  capabilities  (beginning  last  July),  anticipates 
that  by  the  end  of  this  year  about  20  percent  of  its  rev- 
enue will  be  generated  online  through  its  Customer 
Center  at  eastman.com.  Eastman  customers  can  log  on 
to  place  and  track  orders,  obtain  account  information. 


Is  picking 
the  right 
CRM  solution 
a  problem? 

Ge:    an     objective    opinion     ft 
SEI    Information    Technology. 


choke  for  the  right  choke. 
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and  receive  24/7  technical  support. 

"Realizing  that  the  chemical  industry  will  be  funda- 
mentally transformed  as  a  result  of  technology,  we 
decided  to  take  the  lead,"  says  Fred  Buehler,  Eastman's 
director  of  e-commerce.  "Being  perceived  as  a  company 
bringing  solutions  and  value  to  an  industry  lagging  on 


TradeWinds 
Service: 
Now  Available 
In  Three  Sizes. 

Whether  your  meeting  is  a  small  event 
for  fewer  than  60  people,  or  an 
extravaganza  for  600  or  so,  there's  a 
Trade  Winds  Resort  that's  a  perfect  fiL 


With  $20  million  in  renovations,  the 
addition  of  the  newly-opened  Strata 
Beach  Resort,  and  the  heritage  of 
Trade Winds'  award-winning  service, 
pur  three  beach  resorts  promise 
exceptional  meetings  on  the  island  of 
St.  Pete  Beach  on  Florida's  West  Coast. 


information  technology  will  help  differentiate  us — and 
we  can  become  the  preferred  supplier." 

Eastman's  challenge:  Many  of  its  customers  have  limit- 
ed computer  and  Internet  access.  So  Eastman  has  estab- 
lished partnerships  with  Dell  Computer  and  UUnet  to 
help  customers  acquire  updated  computer  hardware  and 
Web  access.  "We  want  to  make  the  Web  the 
preferred  sales  channel,"  Buehler  says. 
"Over  the  long  term,  I  see  more  and  more 
customers  migrating  to  this  channel  as  we 
continue  to  offer  more  services  and  capa- 
bilities." 

Rexam  Plastics,  a  North  Carolina-based 
coating  and  laminates  company,  was  a  pilot 
customer  for  eastman.com.  "In  an  effort  to 
reduce  paperwork  and  to  simplify 
procurement,  we  turned  to  e-commerce," 
says  Bill  Weinert,  purchasing  manager  for 
Rexam.  "Eastman.com  was  a  perfect  fit 
for  us.  We  can  place  orders,  review  com- 
pany history,  look  at  data  sheets  for  a  cata- 
log item,  all  online."  Weinert  says  that  east- 
man.com  is  easy  to  use  and  has  helped  the 
company  reduce  paperwork. 

The  Customer  Center  currently  has  more 
than  500  users  in  North  America  and  is  in 
its  pilot  phase  in  Europe,  Latin  America, 
and  Asia.  "We've  only  begun  to  use  the 
power  of  the  Internet,"  Buehler  says. 
"We've  established  a  lead;  we've  estab- 
lished a  brand,  and  we  are  continuing  to 
invest  in  growing  that  brand." 

— Gabrielle  Birkner 
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CHANNEL  MANAGEMENT 

E-tailers  Go  Offline  to 
Attract  More  Customers 


J 


UST    AS    BRICK-AND-MORTAR    retail 

giants  like  WalMart  and  Circuit 
City  are  clamoring  to  have  a  pres- 
ence on  the  Internet,  many  born- 
on-the-Web  e-tailers  are  looking  to  find  a 
place  for  themselves  offline — by  venturing 
into  the  catalog  business  or  by  opening 
retail  stores.  While  this  may  seem  contra- 
dictory, it's  not.  Both  are  adding  sales 
channels  to  reach  more  customers. 

"Multiple  channels  extend  a  company's 
customer  relationship  strategy  because  cus- 
tomers have  more  choices,"  says  Adam 
Sarner,  an  analyst  with  GartnerGroup,  a 
high-tech  consulting  firm  in  Stamford, 
Connecticut.  Thus  e-tailers  not  using 
offline  channels  are  missing  potential 
markets.  Lucy.com,  a  women's  casual  and 
fitness   apparel   site   based   in   Portland, 
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Oregon,  knows  this.  "There  are  a  ton  of  women  not  shop- 
ping online,  whether  it's  because  they're  not  comfortable 
shopping  on  the  Web  or  don't  have  access  to  it,"  says 
Vicki  Reed,  the  company's  marketing  director.  "Since 
there's  a  void  in  [women's  active  wear]  in  general,  we 
want  to  cast  our  net  as  wide  as  we  can."  That's  why 


Get  up  to  1200  ANSI  Lumens  brightness,  true  XGA 
or  SVGA  resolution,  rich,  vibrant  LCD  color,  and 
a  host  of  presentation  &  projection  tools,  from 
a  9  lb.  package  that  projects  as  good  as  it  looks. 
The  features  you  want,  the  performance  you  need, 
fromThc  New  Family  EIK1  of  Notebook  Projectors. 


For  more  information,  call 

1-800-932-8703 

or  visit  http://www.eiki.com 


A-key  to  belter  communications 


lucy.com  began  a  direct  mail  campaign  and  is  launching  a 
catalog  this  September. 

Other  e-tailers  are  following  suit.  "We  don't  want  to 
pigeonhole  ourselves  into  a  particular  channel,"  says  Tom 
Bazzone,  president  and  COO  of  Red  Envelope  Gifts 
Online,  which  sent  out  its  first  of  five  yearly  catalogs 
this  past  Valentine's  Day.  Bazzone  worked 
at  Williams-Sonoma  prior  to  joining  Red 
Envelope.  "I  know  the  power  of  the  catalog. 
It  has  better  photos,  environmental  shots, 
and  you  can  browse  through  it  in  two 
minutes,"  he  says.  Reed  agrees:  'Catalogs 
showcase  the  depth  of  what  we  carry  in  a 
more  comprehensive  way." 

Both  Red  Envelope  and  lucy.com  mined 
their  direct  mail  recipients  from  a  number 
of  sources,  including  previous  customers, 
users  who  have  registered  on  their  sites, 
and  rented  lists.  Red  Envelope  also  sends 
catalogs  to  gift  recipients.  "It's  a  better  way 
for  (recipients]  to  see  who  we  are,  because 
receiving  a  gift  isn't  an  online  experience," 
Bazzone  says. 

Nevertheless,  says  Ken  Cassar,  senior 
retail  analyst  at  Jupiter  Communications, 
"direct  mail  is  increasingly  common 
because  it  better  leverages  the  infrastruc- 
ture of  the  Internet  and  there  are  a  lot  of 
similarities  between  the  Web  and  direct 
marketing."  The  two  channels  complement 
each  other.  "You  hold  a  catalog  in  your 
hands,  put  it  by  your  bed,  look  at  it  at  quiet 
moments  when  you're  only  thinking  about 
yourself,"  Reed  says.  In  contrast,  with  the 
Internet  if  you  want  one  thing  in  particular, 
you  might  go  to  the  site  and  get  it  without 
taking  the  time  to  look  around. 

Yet  many  e-tailers  are  moving  beyond 
direct  mail,  choosing  to  explore  brick-and- 
mortar  channels  instead.  Companies  such 
as  Bluemercury.com  and  Gazoontite.com 
either  built  or  bought  retail  outlets.  But 
Cassar  doesn't  see  this  as  a  trend,  citing 
few  similarities  between  retail  stores  and 
the  Web.  "It's  the  exception  to  the  rule," 
he  says. 

Though  lucy.com's  catalog  isn't  out 
yet,  Reed  says  the  company  has  "defi- 
nitely seen  spikes  in  Web  traffic"  since 
its  direct  mail  campaign  began.  Thirty 
percent  of  Red  Envelope's  Valentine's 
Day  orders  were  placed  over  the  phone, 
and  of  those  sales,  80  percent  called 
because  they  didn't  have  Web  access. 
"When  they  do  come  online,  they'll  have 
us  in  mind  already,"  Bazzone  says. 

— Elana  Harris 
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Several  Plaintiffs' Firms,  IncludingTwo  inNew  York,Leadihe  Charge 


BY  BRENDA  SANDBURG 

American  Lawyer  Media 

ALREADY  bedeviled  by  legislators 
and  consumer  advocates  about  their 
privacy  policies,  Internet  companies 
now  have  a  new  foe  to  contend  with: 
the  classaction  bar. 

Milberg  Weiss  Bershad  Hynes  <&  Ler- 
ach' is  among  several  plaintiffs'  firms 
pursuing  litigation  against  four  on-line 
companies:  DoubleClick  Inc.,  Ama- 
zon.com Inc.,  RealNetworks  Inc.  and 
Buy.com  Inc. 

The  suits  claim  that  the  businesses 
are  secretly  collecting  personal  data  on 
Internet  users,  such  as  their  e-mail  and 
borne  addresses,  phone  numbers  and 
the  Web  sites  they  frequent.  However, 
the  companies  contend  that  visitors  to 
their  sites  remain  anonymous.  And  they 
are  adamant  that  litigation  is  an  inap- 
propriate way  to  revise  on-line  privacy 
policies. 

For  plaintiffs'  attorneys,  however,  the 
lawsuits  are  an  entree  into  the  dynam- 
ic and  potentially  lucrative  debate  over 
consumer  privacy  on  the  Internet.  Lit- 
tle case  law  exists  on  the  subject,  and 
the  suits  could  give  the  courts  their  first 
crack  at  the  issue. 

The  class  actions  also  coincide  with 


eltorts  by  the  lederal  government,  Con- 
gress and  privacy  advocates  to  hold 
companies  accountable  lor  how  they 
collect  and  use  personal  data.  Last 
month,  the  Federal  Trade  Commission 
issued  a  report  to  Congress  calling  for 
legislation  to  require  companies  to 
meet  specific  privacy  standards.  Sev- 
eral privacy  bills  are  pending  in  Con- 
gress and  state  legislatures  that,  if 
passed,  would  fill  —  along  with  the  law- 
suits —  a  iegai  void  in  the  privacy 
arena. 

Not  surprisingly,  plaintiffs'  attorneys 
prefer  litigation  to  legislation. 

"The  evolution  of  this  is  going  so  fast 
that  companies  are  doing  things  they 
had  not  done  six  months  ago,"  said  Alan 
Mansfield,  a  partner  at  Milberg  Weiss's 
San  Diego  office  and  one  of  the  plain- 
tills'  attorneys  in  class  actions  against 
the  four  companies.  "The  rules  may  be 
obsolete  by  the  time  legislation  is 
adopted." 

On-Line  Footsteps 

The  first  privacy  class  actions  were 
filed  late  last  year  in  both  federal  and 
state  courts.  In  most  instances,  com- 
panies face  more  than  one  class  action. 
For  example,  15  suits  have  been  filed 
against  on-line  advertiser  DoubleClick. 
The  federal  cases  have  been  consoli- 
dated into  In  re  DoubieCiick  inc.  Priva- 
cy Litigation,  00-641,  which  is  pending 
in  the  federal  court  for  the  Southern 
District  of  New  York. 

The  complaints  could  turn  into  a  pot 
ol  money  for  plaintiffs'  firms.  Mr.  Mans- 
field said  statutory  damages  "could  be 
in  the  hundreds  of  million  of  dollars  for 
each  of  the  cases." 

In  iheDoubieClivk  litigation,  Milberg 
Weiss  shares  lead  counsel  status  with 
New  York's  Bernstein  Litowitz  Berger  & 
Grossmann  and  Chicago-based  Miller 


Faucher  and  Cafferty. 

Plaintiffs  claim  that  DoubleClick  uses 
cookies,  electronic  files  with  unique 
identification  numbers,  to  secretly  track 
users'  activities  on  the  Internet  and  col- 
lect their  personal  Information.  When 
an  individual  visits  a  Web  site  that  dis- 
plays a  DoubleClick  ad,  a  cookie  is 
implanted  on  the  user's  computer  sys- 
tem. 

But  DoubleClick  contends  that  the 
visitors  retain  their  anonymity.  "There 
is  no  personally  identifiable  information 
available  from  placement  of  a  cookie," 
said  Doubleclick's  attorney,  Morrison 
&  Feerster  partner  Lori  Schechter. 
Rather,  she  said,  a  cookie  is  used  to 
enable  DoubleClick  to  determine  how 
many  unique  anonymous  visitors  see  a 
given  ad. 

DoubleClick  had  planned  to  combine 
names  with  anonymous  user  activity  on 
the  Internet  following  its  merger  last 
year  with  Abacus  Direct.  Abacus  has  a 
data  base  of  information  about  direct- 
mail  shoppers  that  it  shares  with  cata- 
log companies.  But  in  response  to  an 
outcry  from  consumer  advocates  and 
the  initiation  of  an  FTC  investigation, 
DoubleClick  announced  in  March  that 
it  would  not  link  off-line  and  on-line 
data  until  the  government  and  industry 
agreed  on  privacy  standards. 

Informing  Consumers 

As  to  the  company's  current  prac- 
tices, Milberg's  Mr.  Mansfield  said  Dou- 
bleClick is  playing  a  game  of  semantics, 
that  although  DoubleClick  does  not 
obtain  personal  information  every  time 
someone  visits  a  Web  site  with  its  ban- 
ner ad,  specific  information  is  obtained 
over  time  that  enables  DoubleClick  to 
compose  a  Web  surfer's  profile. 

For  example,  Richard  Smith,  an  Inter- 
net consultant  in  Brookline,  Mass.,  said 
he  recently  found  that  visitors  to  Red 
Herring's  Web  site  typed  in  their  e-mail 
addresses  in  order  to  subscribe  to  a 
Red  Herring  newsletter.  The  e-mail 
address  was  then  automatically  sent  to 
DoubleClick.  While  Mr.  Smith  said  Dou- 
bleClick probably  does  not  use  such 
personally  identifiable  information,  he 
said  the  issue  is  that  the  company  does 
not  inform  consumers  what  it  saves  and 
what  it  throws  away. 

"Companies  can  change  the  rules  at 
a  drop  of  a  hat,"  Mr.  Smith  said.  "What 
they  throw  away  today,  six  months  later 
they  can  keep." 

It  is  the  potential  for  companies  to 
do  harm  in  the  future  that  has  gotten 
many  consumer  advocates  riled  up. 

"There  is  heightened  concern  not 
about  what  you  are  doing  or  collecting 
now,  but  about  what  you  might  do  in 
the  future  as  a  result  of  industry  merg- 
ers and  consolidation,"  said  James 
Brelsford,  the  managing  partner  of 
I^erkjns  Coie's  Menlo  Park  and  San  Fran- 
cisco offices. 

Mr.  Brelsford  represents 

Amazon.com  Inc.  and  its  affiliate  Alexa 
Internet  in  a  Pjrtyacy  class  actionTTive" 
suit  alleges  that  Alexa's  software  inter- 
faces with  a  user's  Internet  browser  to 
obtain  information  about  the  Web  sites 


the  individual  visits. 

In  the  other  class  actions  Milberg 
Weiss  is  pursuing,  RealNetworks  Is 
alleged  to  collect  personal  data  via  soft- 
ware that  enables  computers  to  play 
audio  and  video  files.  The  complaint 
against  Buy.com  claims  the  on-line 
superstore  collects  personal  informa- 
tion and  transmits  it  to  advertising  com- 
panies. 

Gaggle  of  Players 

Concern  over  on-line  privacy  Is  at  an 
all  time  high.  Last  month,  the  Federal 
Trade  Commission  issued  a  report  to 
Congress  calling  for  privacy  legislation. 
The  agency,  which  has  been  monitor- 
ing commercial  Web  sites  for  several 
years,  said  companies  have  not  been 
successful  in  regulating  themselves  and 
that  most  do  not  adequately  disclose 
the  information  they  collect. 

Several  bills  are  pending  in  Congress. 
The  most  closely  watched  is  the  Con- 
sumer Privacy  Protection  Act,  S.  2606, 
introduced  by  Senator  Ernest  Holllngs, 
D-S.C,  the  day  after  the  FTC  issued  its 
report.  As  mandated  by  the  FTC,  the  bill 
would  require  commercial  Web  sites  to 
notify  consumers  what  information  is 
collected  about  them  and  how  it  Is 
used,  permit  consumers  to  cnoose 
whether  this  data  can  be  used,  give  con- 
sumers access  to  the  data  and  make 
sure  the  information  is  secure. 

As  an  alternative  to  a  legislative  fix, 
the  World  Wide  Web  Consortium,  or 
W3C,  is  developing  a  protocol  to 
enhance  on-line  privacy.  The  standard, 
called  Platform  for  Privacy  Preferences, 
or  P3P,  would  enable  Internet  users  to 
select  the  type  of  privacy  policy  they 
wish  to  use.  A  Web  server  would  auto- 
matically communicate  how  it  collects 
and  shares  data  and  a  user's  browser 
would  only  go  to  sites  that  meet  its  pri- 
vacy specification.0.. 

While  many  companies  believe  that 
a  technology  fix  is  preferable  to  legis- 
lation, some  privacy  advocates  say  the 
P3P  falls  short  of  protecting  consumers' 
privacy.  Last  week  the  Electronic  Pri- 
vacy Information  Center,  Junkbusters 
Corp.  and  other  privacy  proponents 
released  a  report  critical  of  the  proto- 
col, which  is  still  in  draft  form. 

Jason  Catlett,  president  of  Junk- 
busters, an  on-line  privacy  advocate, 
believes  legislation  Is  the  only  way  to 
assure  consumer  privacy.  He  said  pri- 
vacy problems  exist  "because  the  Unit- 
ed States  doesn't  have  legislation  that 
■  requiresinformationto  l)etreated:ln"a' 
fair  and  transparent'way."  ' '  ' ' 

Mr.  Brelsford  concurs:  "Having1  sdrne' 
clarity  as  to  Ihe  do's  and  tioh'ts  lls 
preferable  to  the  situation  industry  is 
facing  now,"  he  said. 

But  litigation,  he  said,  is  not  the  way 
to  bring  about  new  policy.  The  plain- 
tiffs, he  says,  are  attempting  to  exploit 
consumer  worries  about  on-line  priva- 
cy. Milberg  Weiss's  Mr.  Mansfield 
believes  It  is  the  Internet  companies 
who  are  exploiting  the  s>tuation. 
"Rather  than  trying  to  fix  the  problem, 
companies  are  trying  to  make  [their 
activities]  more  surreptitious. 
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Your  Favorite  Web  Site 
Can  Be  Just  Like  Home 


JEFF  LEVY 

Question:  I  frequently  open  the 
same  Web  page  to  track  my 
stock  portfolio.  Is  there  a  faster 
way  to  get  to  that  Web  site  without 
having  to  go  to  the  Internet  and 
then  use  Favorites  to  go  to  that 
particular  site? 

—Anthony  S.,  Los  Angeles 

Answer:  You  have  two  choices 
here.  You  can  make  that  Web 
page  your  "home"  nape  (the  page 
your  browser  software  opens  every 
time  you  go  on  the  Internet). 

If  you  use  MS  Internet  Explorer, 
click  on  Tools  and  then  on  Internet 
Options.  In  the  Home  page  section 
type  in  the  URL  (Uniform  Re- 
source Locater— the  Web  address). 
Click  OK. 

If  you  use  Netscape  Navigator, 
click  on  Edit  and  then  on  Prefer- 
ences. Type  the  name  of  your  new 
home  page  in  the  Home  page  sec- 
tion. Now,  whenever  you  open  your 
browser,  it  will  open  with  the  new 
home  page. 

You  also  can  go  directly  to  any 
Web  page  by  creating  a  shortcut  to 
that  page.  Right-click  anywhere  on 
the  Desktop.  Select  New  and  then 
select  Shortcut.  Type  the  Web 
page  address  in  the  Command 
Line:  box.  Click  OK  and  tj  p 
i  ame  of  the  Web  page  in  the  ...  n 
box.  Click  I 


misn.  now  you  can  j^o 

right  from  the  Desktop  by  double- 
<  i'!  the  icon  tor  that  shortcut. 
To  use  that  shortcut  without  hav- 
ing to  go  back  to  your  Desktop, 
right-click  on  the  shortcut  and  then 
select  Properties.  In  the  Shortcut 
key  box,  click  on  the  word  None. 
Press  a  function  key:  F12,  for  exam- 
ple. Click  OK.  Nov.  you  can  go  di- 
rectly to  that  Web  page  by  pressing 
the  FI2  key.  H  you  aren't  connected 
to  the  Web  when  you  press  the  F12 
key.  Windows  will  connect  you. 

ABCs  of  Organizing 
Items  on  Start  Menu 

QIs  it  possible  to  sort  the  items 
on  my  Start  menu?  I'd  like  to 
sort  things  in  alphabetical  order. 

—Brian  S.,  Encino 

A  You  can  move  items  on  the 
Start  menu  by  clicking  on  an 
item  and  dragging  it  to  the  desired 
location.  If  you  use  Internet  Ex- 
plorer 5.0  or  newer,  you  can  alpha- 
betize the  items  in  any  folder  on 
the  Start  menu.  Just  right-click  on 
any  item  in  the  folder  and  then  se- 
lect Sort  by  Name. 

Taskbar  Can  Be  Moved 
or  Tucked  Out  of  Sight 

QCan  the  Taskbar  be  moved  to  dif- 
ferent locations  on  my  screen  or 
be  hidden  until  I  need  to  use  it? 

—Joan  A.,  W.  Covina 


A  You  can  move  the  Taskbar  to 
the  top  or  either  side  of  your  — 
screen.  Place  the  cursor  on  any  mi 
blank  spot  in  the  Taskbar,  click  and 
hold  down  the  left  mouse  button, 
and  drag  the  Taskbar  to  its  new  lo- 
cation. Release  the  mouse  button 
and  the  Taskbar  stays  in  place. 

The  Taskbar  also  can  be  hidden 
when  not  in  use,  which  gives  you  ) 1 
more  viewable  screen  space.  Right- 
click  on  any  blank  space  on  the 
Taskbar  and  select  Properties.  Click  >T 
in  the  small  box  to  the  left  of  Auto 
hide.  Click  on  Apply  and  then  on  IX 
OK.  Click  anywhere  on  the  Desktop 
and  the  Taskbar  shrinks  out  of  sight,  u 
To  retrieve  the  hidden  Taskbar,  just 
hold  your  mouse  pointer  over  the  J 
edge  of  the  screen  where  the  Task- 
bar  is  hidden  (you'll  be  able  to  see  its 
edge),  and  the  Taskbar  returns  to 
where  it  should  be. 

Label  Identifies  Disk's 
Creation  Date,  Content 

QI  notice  that  when  I  format  a 
floppy  disk,  I  can  place  a  label 
on  that  disk.  What  is  the  purpose 
of  putting  labels  on  disks? 

—FredE.,Malibu 

A  Both  DOS  and  Windows  allow 
you  to  place  Volume  Labels  on 
hard  and  floppy  disks.  You  don't 
need  to  use  labels,  but  you  can  use 
them  to  identify  any  disk  in  terms 
of  when  it  was  created  or  the  infor- 
mation it  contains. 
To  add  or  change  a  disk  label, 


(defe, 


then  click  on  the  disk.  Click  or.  File 
and  then  on  Properties.  Type  the 
new  label  name  (up  to  11  charac- 
ters) in  the  Label  box.  Click  OK. 
Now,  every  time  you  look  at  that 
disk  through  My  Computer,  Ex- 
plorer or  DOS,  you'll  see  the  Vol- 
ume Label  you  created. 

To  label  a  disk  from  a  DOS 
prompt,  type  Label  and  press  En- 
ter. DOS  will  display  the  current 
disk  volume  label,  if  any,  and 
prompt  you  to  enter  a  new  volume 
label  using  up  to  11  character's,  in- 
cluding blank  spaces. 

Explorer's  Alexa  Aids 
Search  for  Web  Sites 

QIs  there  a  way  to  find  related 
links  to  Web  pages  that  have 
the  kind  of  content  I'm  interested  in? 
—Armando  G.,  San  Gabriel 

A  If  you  use  Internet  Explorer  5 
or  newer,  you  can  take  advan- 
tage of  a  huge  database  called  Al- 
exa. A  free  service  that  finds  and 
ranks  Web  sites,  Alexa  can  lead  to 
better  search  results  than  you 
might  get  using  regular  search  en- 
gines. To  use  Alexa,  just  open  any 
Web  page  in  Internet  Explorer  and 
click  on  Tools  and  then  on  Show 
Related  Links. 

Jeff  Levy  hosts  the  "On  Computers" 
radio  talk  show  from  9  a.m.  to  noon 
Sundays  on  KFIAM  (640).  He  can  be 
reached  at  /ef?/evyl<«®nofmaW.coni.        ,y 
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Eyescream  opens  branch 
office  in  the  Bay  Area 


Eyescream    interactive    has 

become  the  latest  Portland  agen- 
cy to  open  an  office  in  the  Bay 
Area.  y 

The  Portland  online  advertis- 
ing agency  joins  several  high- 
profile  local  agencies,  including 
Elvis  &  Bonaparte,  Cybersight  and 
KVO  Public  Relations,  that  have 
all  recently 

ADVERTISING  £££ 

San    Fran- 
cisco and  Silicon  Valley  area 

According  to  Mark  Grimes, 
chief  executive  officer  and  presi- 
dent for  Eyescream,  "Times  have 
changed." 

The  growing  market  for  Inter- 
net start-ups  and  various  entre- 
preneurs, in  addition  to  the  value 
of  meeting  clients  in  person,  are  a 
drive  reaS°n  f°r  the  southwafd 
"When  we  first  began  in  1996,  it 
took  us  nine  months  before  we 
met  our  first  client,  Cyberian  Out- 
post, face-to-face,  and  we  had  al- 
ready exchanged  nearly  a  million 

Dllars.  It  malr^c  e^K.™  ♦ 


^eoplF 


,     ,.  '         .  p~"  "v-any  a  lilllliun 

dollars.  It  makes  sense  to  open  a 
satellite  office  and  give  us  a 
chance  to  meet  face-to-face  with 
our  clients." 

Account  management  will  be 
the  priority  for  the  new  office 
^ngvvith  many  of  its  clients' 
in  the  Bay  Area,  including  think- " 
free.com   a  Web-based  suite  of 
Microsoft    Office    applications, 
-alexaxQiri,  a  free  Web  navigation 
service,  and Joodcorn,  a  Web  site 
providing  food  and  online  dining 
reservations.  Eyescream  will  con 
bnue  to  provide  creative  and  me- 
dia strategies  from  its  Portland 
headquarters. 

Robert  Birks,  who  joined  Eve- 
scream  last  fall,  will  head  the  new 
office  as  its  director  of  operations. 
Tamara  Meek,  a  veteran  with  sev- 
eral firms,  including  a  recent  stint 
as  the  director  of  advertising  for 
Autoworld.com,  joins  as  director 
of  advertising.  Andrea  Monkous- 

Sj?  aCrC°unt  manager  with 
Northern  Light  Communication, 
has  been  hired  as  the  firm's  ac- 
count manager. 

Although  plans  have  not  been 
finalized  Grimes  noted  the  agen- 
cy is  looking  to  open  two  addi- 
tional offices  within  the  year,  slat- 
ed for  New  York  City  and  London. 
/»\ 


The  Oregon  Creative  Services  Alli- 
ance has  selected  Jeanette  Pilak 
as  its  first  executive  director.  Pilak 
previously  was  president  of  Jea- 
nette Pilak  &  Associates,  a  non- 
profit management  consulting 
nrm,  and  currently  serves  on  the 
Beaverton  Arts  Commission. 

Second  Story  Interactive  Studi- 
os has  hired  Gabe  Kean  as  lead 
designer.  Kean  was  formerly  a 
rounding  member  and  senior  de- 
signer of  Alrrec.com  of  Bellevue 
Wash.,  and  currently  serves  as  art 
director  of  Born  Magazine. 

KVO  Pifolfo  Relations  has 
promoted  Vicki  Fullbright  to 
senior  account  executive  and 
Jeff  Hardison  and  Sara  Lab- 
berton  to  account  executive  in 
the  corporate  and  consumer  af- 
fairs practice.  Hannah  Wiley  has 
joined  the  firm  as  associate  ac- 
count executive  in  the  corporate 
and  consumer  affairs  practice. 

h,vYHU^.&  »Roehr  GrouP  has 
hired  Kathy  Brock  as  copywriter 
and  Amber  Russell  as  senior  ac- 
count executive.  Brock  was  com- 
munication coordinator  at  Provi- 
dence Health  Systems.  Russell 
was  with  Spirit  Mountain  Gam- 
ing. 
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Organize  Your  Sites 

By  Sarah  Pike,  PC  Magazine 
June  26,  2000  9:00  PM  PT 
URL: 

However  you  keep  notes — a  Palm,  penciled  memos  stuffed  in  your  pocket,  or 
microrecorded  "notes  to  self — you've  probably  jotted  down  dozens  of  URLs,  at  least  one 
from  nearly  every  acquaintance.  The  coolest  site,  the  most  useful  investment  site,  the  most 
up-to-the-minute  news  site.  As  if  you  didn't  have  enough  to  remember!  The  Web  is  now 
making  amends  for  its  unwieldy  size,  with  free  sites  and  services  designed  to  keep  your 
URL  clutter  to  a  minimum.  You  can  store  and  share  your  bookmarks,  access  them  from  any 
computer,  browse  with  friends  and  self-styled  experts,  visit  sites  related  to  the  one  you're 
viewing,  or  just  sit  back  and  take  a  prearranged  tour.  Here  are  some  of  our  favorites. 

BOOKMARK  IT 

Long  the  site  to  beat,  Blink.com  has  attracted  plenty  of  competition.  For  sheer  number  of 
features,  though,  this  site  still  rules  the  roost.  The  Blink  It!  Button — duplicated  by  nearly 
every  site  here — sits  in  a  Microsoft  Internet  Explorer  or  Netscape  Navigator  toolbar.  You 
click  on  it  to  add  the  current  page  to  your  Blink  bookmarks.  The  Surfboard  is  a  floating 
window  that  contains  your  links.  You  can  surf  from  it,  share  it,  and  even  e-mail  it.  The 
BlinkBar  (for  ie  only)  can  grab  all  the  links  on  any  page,  edit  out  the  ones  you  don't  want 
(such  as  banner  ad  links),  and  save  the  rest.  Being  popular  doesn't  hurt,  either:  Blink's 
Public  Library  is  jam-packed  with  members'  bookmarks. 

Any  bookmark  manager  will  import  your  bookmarks  and  let  you  add  bookmarks  easily. 
Backflip  (www.backflip.com)  goes  a  step  farther,  offering  to  organize  your  bookmarks 
automatically,  if  not  perfectly.  And  Backflip  Buddy,  for  ie  only,  contains  all  your  links  and 
lets  you  search  the  contents  of  your  bookmarked  pages  or  the  Web. 

Quiver  (www.quiver.com)  is  an  effective  solution  that  has  the  same  features  in  ie  and 
Netscape,  unlike  most  of  the  sites  here,  which  tend  to  have  fewer  features  in  Netscape. 
Billing  itself  "the  human-powered  directory,"  Quiver  offers  message  boards,  chat,  and  a 
public  page  for  your  shared  links.  You  can  send  brief  (not  instant)  messages  to  friends  and 
share  some  or  all  of  your  bookmarks.  In  its  bid  for  uniqueness  in  this  category,  Quiver  has 
decorative  skins,  too. 
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Both  Clickmarks  (www.clickmarks.com)  and  HotLinks  (www.hotlinks.com)  have 
organizational  capabilities  for  basic  bookmark  management.  Clickmarks  lets  you  drag  and 
drop  bookmarks  within  the  browser.  As  you  designate  HotLinks  folders  public,  private,  or 
shared,  you  can  add  descriptive  icons  to  your  links.  HotLinks  will  also  suggest  links  related 
to  your  own. 

Solely  for  keeping  bookmarks  consistent,  BookmarkSync  (www.bookmarksync.com)  is 
private  by  default  and  not  overburdened  with  community  features.  It  syncs  bookmarks  from 
both  ie  and  Netscape,  though  not  well.  And  watch  out:  BookmarkSync  sometimes  changes 
the  file  extension  of  your  Netscape  Bookmarks  file,  and  you'll  have  to  find  and  rename  the 
file  for  Netscape  to  recognize  it. 

MAY  WE  RECOMMEND...? 

The  guides  at  About.com  have  gathered  copious  information  and  numerous  sites  relating  to 
more  than  700  specific  topics.  Guides  share  About.com's  profits  in  proportion  to  the  traffic 
their  sites  generate,  so  they  strive  to  create  the  sharpest,  most  relevant  sites  for  their  chosen 
topics. 

Even  if  you're  not  working  in  a  browser,  Flyswat  (www.flyswat.com)  can  point  you  to 
Web-based  information.  Alt-<left  mouse  click>  in  any  application  for  a  list  of  relevant  sites. 
In  ie,  Flyswat  will  underscore  words  it  recognizes  on  a  page;  click  these  "flycons"  for  a 
ready-made  list  of  related  sources. 

As  a  pointer  toward  related  sites  and  as  a  wellspring  of  essential  facts  about  the  site  you're 
viewing,  Alexa  (www.alexa.com)  is  the  queen  of  Web  info.  Alexa  integrates  with  ie  as  an 
Explorer  bar,  much  nicer  than  the  separate,  floating  Netscape  workalong.  Alexa  includes 
reference  tools,  such  as  Britannica.com  and  Merriam- Webster  OnLine,  but  its  most  exciting 
extra  is  its  page  archive.  When  you  try  to  access  a  page  that  returns  a  404 — Not  Found  error 
or  is  otherwise  unavailable,  Alexa  searches  through  its  several  million  archived  pages  to 
find  the  one  you're  looking  for. 

COME  BROWSE  WITH  ME 

Shared  browsing  is  clunky  but  rife  with  potential.  Net2gether.com,  a  beta,  isn't  elegant,  but 
its  co-browsing  works  just  fine.  Once  you  create  a  session  and  invite  other  Net2gether 
members  to  join,  a  small  chat  area  opens  at  the  bottom  of  the  screen,  with  the  browser  (ie  or 
Net  scape)  window  above.  Only  the  leader  can  surf,  but  the  leader  can  also  pass  leadership 
privileges  to  someone  else.  If  you  surf  to  a  secure  site,  only  you  will  see  its  contents — a 
restriction  common  for  legal  reasons. 

Beta  iKena  (www.ikena.com)  also  lets  you  chat  and  browse  in  a  group.  Though  its  interface 
is  slightly  more  comfortable  and  less  complicated  to  use  than  Net2gether's,  iKena  works 
with  ie  only.  Unfortunately,  there's  no  leader;  anyone  can  enter  a  URL.  Democratic  but 
ineffective,  this  system  means  that  parties  with  slower  connections  will  inevitably  find  new 
pages  loading  before  they  have  a  chance  to  view  the  previous  page.  Like  unmoderated 
conference  calls,  iKena  sessions  become  a  jumble  of  user  input. 
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SideTalk  (www.sidetalk.com)  incorporates  a  number  of  features  within  its  ie  Explorer  bar 
(Netscape  SideTalk  is  on  its  way),  including  bookmark  management  and  related  site  listing. 
SideTalk's  floating  chat  window  is  easier  on  the  eyes  than  the  tiny,  bottom-of-the-screen 
solutions  are.  Co-browsing  sessions  can  be  public  or  private,  and  the  session  creator  can 
maintain  leadership  or  pass  it  on. 

SIT  BACK,  RELAX,  AND  ENJOY  THE  WEB 

When  you  sign  up  with  eTour  (www.etour  .com),  you're  presented  with  a  list  of  interests  to 
choose  from.  This  is  the  last  decision  you'll  have  to  make.  The  eTour  bar  appears  as  a  frame 
in  your  browser,  with  a  big  button  marked  Next,  along  with  a  few  others.  Hit  Next  and 
you're  taken  to  a  site  related  to  one  of  your  interests.  To  mix  things  up  a  bit,  you  can  go  on  a 
prebuilt  tour  in  Surf  by  Interest  (not  based  on  the  interests  you  entered).  Naturally,  eTour 
has  its  own  bookmark  utility,  for  snapshots  of  your  eTour  vacation. 

The  more  aggressive  Roboguide  (www  .roboguide.com)  directs  your  viewing  from  the 
moment  you  enter  the  site.  Roboguide  has  dozens  of  prearranged  tours,  their  purpose  more 
to  inform  than  to  entertain.  In  addition  to  these,  you  can  create  tours  for  others  to  view.  You 
can  also  pause  tours  to  follow  interesting  links,  though  you  may  have  to  browse  back  to 
continue  touring. 

Intended  for  creating  tours,  SpotOn  (www.spoton.com)  contains  a  fair  collection  of  user- 
created  tours  as  well.  The  full  SpotOn  program  works  only  in  ie,  running  as  an  Explorer 
bar,  though  you  can  play  tours  in  Netscape  as  well.  Because  SpotOn  tours  are  user-created, 
content  quality  is  unpredictable.  You  can  compile  your  own  set  of  sites,  though,  and  e-mail 
them  to  friends  or  colleagues. 

NEW  AT  PCMAG.COM:  RELIABILITY  REPORTS 

Once  again,  we've  asked  thousands  of  PC  Magazine  readers  their  opinions  of  the  reliability 
of  the  products  they  use  and  of  the  service  they  get  when  they  need  help.  See  the  complete 
reports  at  www.pcmag.com/service2000.  GET  THIS  ISSUE'S  UTILITY 

System  Valet  lets  you  create  and  schedule  scripts  with  multiple  tasks.  It  improves  on 
Microsoft's  Scheduled  Tasks  feature,  which  is  included  with  Internet  Explorer  4  or  later. 
Download  System  Valet  today  at  our  site.      

Related  Links 

FIRST  LOOKS 
(page  32) 
products  reviewed 
Adobe  FrameMaker  6.0 
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From:  amy@alexa.com 

Sent:  Monday,  July  1 0,  2000  8:37  AM 

To:  'staff@alexa.com' 

Subject:  Editorial:  Amazon  Will  Stand  Tall 


Wall    Street    Journal    EDITORIAL 

July    10,     2000 


Amazon  Will  Stand  Tall 

By  Robert  Spector.  Mr.  Spector  is  author  of  "Amazon.com:  Get  Big  Fast" 
(HarperBusiness ,  2000),  and  "Lessons  From  The  Nordstrom  Way," 
forthcoming  in 

November  from  John  Wiley  &  Sons. 

The  current  clucking  over  Amazon.com1 s  falling  stock  price  and 

ostensible 

fiscal  woes  is  evidence  that  the  company  is  now  smack  dab  in  the  middle 

of 

Act  II  of  its  own  market  melodrama. 

You  know  how  this  production  goes. 

Act  I:  A  great/cool/innovative  company,  led  by  a  brilliant  founder/CEO 

turns 

an  industry  on  its  ear.  The  CEO's  face  is  splashed  across  the  covers  of 

business  magazines.  The  stock  shoots  through  the  roof. 

Act  II:  The  company  stumbles.  The  market  says,  "Maybe  it's  not  as 

great/cool/innovative  as  we  thought.  Kill  the  stock!" 

Act  III:  Redemption.  Overcoming  adversity  and  market  doubt,  the  company 

proves  the  naysayers  wrong.  Time  for  another  cover  story.  As  for  the 

stock, 

accumulate,  accumulate! 

Headed  for  Success 

Of  course,  some  companies  never  survive  Act  I  (see  boo.com),  and  others 

die 

during  Act  II.  Amazon.com,  however,  will  make  it  to  Act  III. 

That's  partly  because  Jeff  Bezos,  Amazon's  founder  and  CEO,  anticipated 

the 

unpredictable  machinations  of  the  market  for  Internet  stocks  more  than  a 

year 

ago  and  acted  accordingly. 

"When  the  Internet  bubble  bursts,"  a  shareholder  queried  Mr.  Bezos  at 

the 

company's  annual  meeting  on  May  18,  1999,  "how  do  you  see  that  affecting 

Amazon. com? " 

To  which  the  future  Time  magazine  Person  of  the  Year  replied: 

"Amazon.com  is 

very,  very  likely  to  trade  along  with  the  other  Internet  stocks.  That's 

likely  to  account  for  the  large  bulk  of  the  variance  of  our  stock  price 

on 

any  given  day  or  week.  So,  if  the  .  .  .  bottom  of  the  Internet  market 

drops 

out,  Amazon.com  is  likely  to  follow  that  very  path." 

With  most  Internet  stocks  falling  out  of  favor  and  Amazon's  shares 

currently 

trading  in  the  mid-30s  --  about  30%  of  its  52-week  high  --  Mr.  Bezos  has 

1 


proved  his  prescience.  But  he  was  also  smart  enough  to  raise  his  money 

when 

the  capital  markets  were  still  infatuated  with  the  company. 

So,  contrary  to  the  opinion  of  certain  stock  analysts,  Amazon.com  is  not 

running  out  of  cash.  In  the  past  year,  Mr.  Bezos  had  no  trouble  raising 

a 

couple  of  billion  dollars  in  cash  in  order  to  carry  out  his  strategy  of 

"get 

big  fast,"  which  meant  expanding  so  rapidly  that  he  would  leave 

competitors 

in  the  dust. 

In  1999  the  company  announced  a  major  new  initiative  or  strategic  move 

about 

once  every  six  weeks  (a  pace  that  has  barely  slowed  down  this  year) , 

while 

adding  product  categories  and  services  and  ramping  up  sales  volume. 

Amazon 

now  operates  10  distribution  centers  world-wide  with  about  three  times 

as 

much  capacity  as  the  company  will  likely  need  to  handle  its  sales  volume 

this 

year.  (Sales  for  2000  are  projected  to  approach  $3  billion,  almost  three 

times  last  year's  figures.) 

Today,  Amazon  is  sitting  on  more  than  $1  billion  in  cash,  and  it  is 

expected 

to  close  out  2000  with  at  least  $700  million. 

Complaints  about  Amazon's  quarterly  performance  don't  add  up  either.  If 

you 

strip  away  everything  --  cool  Web  site,  "Earth's  Biggest  Selection"  (of 

merchandise)  hype  --  Amazon.com  is  just  like  any  other  retailer,  which 

means 

it  depends  on  the  fourth  quarter  to  make  its  year.  Curiously,  this 

realization  appears  to  be  just  dawning  upon  some  analysts,  who  are 

fretting 

that  Amazon. corn's  second  and  third  quarters  won't  achieve  the  analysts' 

growth  expectations. 

But  the  company's  second-quarter  revenues  could  reach  $600  million,  a 

jump 

of 

more  than  90%  over  the  same  quarter  a  year  ago  and  a  5%  increase  from 

the 

first  quarter's  $574  million.  Expectations  are  for  a  $640  million  third 

quarter.  The  fourth  quarter  is  expected  to  generate  revenues  between  $1 

billion  and  $1.2  billion  --  twice  as  much  as  each  of  the  preceding 

quarters . 

Nothing  wrong  with  those  numbers. 

With  the  shakeout  of  Amazon  wannabes,  moreover,  Mr.  Bezos ' s  company  has 
become  the  default  Internet  retailer  for  the  Christmas  2000  shopping 
season 

because  it  has  built  the  most  recognizable  brand,  which  was  another 
element 

of  the  get-big-fast  strategy. 

Curiously,  Lehman  Brothers'  chief  convertible  strategist,  Ravi  Suria, 
recently  called  this  upcoming  holiday  shopping  season  for  Amazon.com 
"arguably  its  most  challenging."  It's  much  more  likely  that  last  year 
was 

Amazon's  most  challenging,  because  the  competition  then  was  much 
greater . 

Remember  all  those  ads  for  dot-com  companies  you'd  never  heard  of?  You 

2 


haven't  heard  about  them  since.  Those  firms  have  either  disappeared  or 

been 

severely  diminished. 

Amazon  will  not  have  to  spend  as  much  on  marketing  as  it  did  last  year, 

and 

it  has  all  its  distribution  centers  and  fulfillment  systems  in  place. 

Customers  trust  Amazon  more  than  ever,  because  it  satisfied  most 

customers 

during  the  last  holiday  shopping  madness.  It  achieved  this  by 

overstocking 

its  warehouses  with  inventory  from  its  then-new  businesses  such  as 

electronics  and  toys.  As  a  result,  the  company  incurred 

higher -than- expected 

inventory-related  charges  and  write-downs  --  $39  million  --  for  the 

fourth 

quarter . 

Yet  while  that  inventory  cost  a  lot  of  money  in  the  short  run,  it  bought 

the 

long-term  loyalty  of  a  burgeoning  customer  base.  During  the  last  holiday 

season,  my  sister  bought  someone  a  couple  of  bottles  from  wine.com.  The 

Web 

site  fumbled  the  order,  fumbled  the  billing  and  fumbled  the  follow-up. 

My 

sister's  response?  That's  the  last  time  she'll  click  on  wine.com.  One 

chance 

and  done.  Amazon  took  great  pains  to  make  sure  that  similar  problems 

didn1 t 

happen  to  its  customers. 

So  what  have  Mr.  Bezos  and  Amazon.com  gotten  for  the 

billion- do liars-plus 

the 

company  has  spent  in  its  five  years  of  existence? 

*  State-of-the-art  distribution  and  fulfillment  systems. 

*  A  customer  base  of  more  than  20  million  with  an  average  annual 
revenue 

of 

$121  per  customer. 


*    Falling  customer-acquisition  costs  --  now  $19  per  customer,  less 

than 

other  e-tailers. 


*  The  most  powerful  retail  brand  name  on  the  Internet. 

*  Profitable  businesses  in  books,  CDs  and  DVDs. 


*    Arguably  the  best  customer  service  on  the  Internet. 

Pure-Play  Risks 

Even  with  these  advantages,  Mr.  Bezos  has  long  preached  that  investing 

in  a 

company  like  Amazon.com  is  not  for  everybody.  "Internet  pure  play 

companies , 

including  Amazon.com,  are  extremely  volatile,"  he  said  at  that  1999 
shareholders  meeting.  "I  think  that  is  highly  unlikely  to  change  any 
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the  near  future.  In  fact,  I  believe  that  small  investors  should  not  have 
but 

the  smallest  portion  of  their  life  savings  in  [Internet  pure-play 

companies ] . 

Short-term  investors  should  have  no  portion  of  their  life  savings  in 

Internet 

pure-play  companies." 

While  some  of  Mr.  Bezos ' s  harshest  critics  feel  that  Amazon.com  is  only 

slightly  more  reputable  than  a  Ponzi  scheme,  everyone  I  have  interviewed 

who 

is  close  to  him  believes  that  his  most  fervent  goal  is  to  create  a 
legacy  of 

success . 

"Long-term,  we  are  trying  to  build  a  company  that  is  independent  of 

certain 

'Internet  sentiment'  --  how  investors  feel  about  Internet  stocks,"  he 

told 

shareholders.  "We're  trying  to  build  an  important  and  lasting  company 

that 

is,  in  the  long  term,  valued  on  a  price/earnings  multiple  just  like  any 

other 

company . " 

After  Mr.  Bezos  gets  through  Act  II,  Amazon.com' s  Act  III  should  be 

very, 

very  interesting. 

Amy  Vecchione 

VP  of  Marketing  &  Business  Development 

Alexa  Internet 

Presidio  PO  Box  29141 

San  Francisco,  CA   94129 

(415)  561-6934;  (415)  561-6795  (fax) 

amy@alexa . com 
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The  Politics  Of  Privacy  Protection 


Momentum  for  online  privacy  regulation  is  building--and  odds  are  good  that  the 
government  will  step  in 

By  Cheryl  Rosen  and  Beth  Bacheldor 

Orivacy.  It's  an  American-as-apple-pie  issue.  When  it  comes  to  online  data, 
Federal  lawmakers  and  enforcers  now  want  to  claim  it  as  their  own. 

The  Federal  Trade  Commission  last  week  filed  suit  against  Toysmart.com  Inc., 

the  failed  online  retailer  of  children's  toys,  to  block  the  company  from  selling  its  i 

customer  data  as  part  of  its  assets.  The  lawsuit  stems  from  the  fact  that 

Toysmart.com-whose  databases  include  children's  names,  birth  dates,  and  toy 

wish  lists— had  a  privacy  policy  that  promised  "personal  information  voluntarily 

submitted  by  visitors  to  our  site,  such  as  name,  address,  billing  information,  and 

shopping  preferences,  is  never  shared  with  a  third  party."  The  FTC  thinks 

Toysmart.com  should  live  up  to  its  promise.  "Even  failing  dot-coms  must  abide  by  their  promise  to 

protect  the  privacy  rights  of  their  customers,"  FTC  chairman  Robert  Pitofsky  said  in  a  statement  on 

the  case.  "The  FTC  seeks  to  ensure  these  promises  are  kept." 

The  FTC's  action  comes  at  a  time  when  consumers  are  beginning  to  worry  that  online  privacy 
policies-to  paraphrase  Sam  Goldwyn's  famous  line  about  verbal  contracts— aren't  worth  the  paper 
they're  printed  on.  In  an  election  year,  as  politicians  sense  there  are  votes  to  be  gained  by  promising  to 
protect  intimate  details  from  online  marketers,  that  may  translate  into  federal  action.  It  may  help 
explain  why  there  are  300  Internet  privacy  bills  floating  around  Congress,  with  more  expected.  Also, 
a  string  of  hacker  attacks  and  database  glitches  has  raised  awareness  of  just  how  vulnerable  the 
Internet  is.  Suddenly,  the  odds  seem  good  that  politicians— both  here  and  overseas— will  impose 
privacy  controls  on  the  Internet  industry  rather  than  let  the  industry  regulate  itself. 

July  has  been  a  bad  month  for  those  who  argue  for  industry  self-regulation.  Along  with 
Toysmart.com,  two  other  failing  Internet  companies-Boo.com  and  CraftShop.com— were  discovered 
trying  to  sell  private  customer  information  such  as  phone  and  credit-card  numbers,  home  addresses, 
and  even  data  on  shopping  habits.  That  news  prompted  Rep.  Spencer  Bachus,  R-Ala.,  to  say  he'll 
introduce  legislation  that  would  make  it  illegal  to  sell  such  data  to  third  parties  during  a  bankruptcy. 
At  the  same  time,  an  ongoing  class-action  lawsuit  against  DoubleClick  Inc.,  aimed  at  forcing  the 
online  advertising  company  to  stop  using  Web  bugs— a  widely  used  and  nearly  invisible  way  to  track 
Web  surfers— and  to  let  people  see  and  correct  the  information  about  them,  kept  the  privacy  issue  in 
the  forefront.  Even  America  Online  came  under  fire;  the  online  service  is  the  target  of  a  class-action 
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sites'  privacy  policies."  The  bill  will  require  Web  sites 
to  clearly  disclose  their  privacy  policies  in  plain 
language,  including  what  information  is  collected,  how 
it's  used,  whether  it's  sold  to  third  parties,  and  how 
consumers  can  opt  out  of  having  the  data  collected 
and  passed  along. 
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A  Forrester  Research  survey  of 
50  companies  indicates  that 
most  use  customer  data  for 
internal  analysis  and  to  send 
marketing  E-mails  (see  chart, 
left).  Less  than  10%  say  they 
sell  or  share  the  data  with  third 
parties.  And  most  companies 
oppose  a  government-imposed 
^ privacy  policy,  according  to  the 
Forrester  survey  (see  chart, 
below). 


Still,  there  seems  to  be  a  growing  consensus  that  some  form  of  legislation  is 
necessary.  "I  used  to  be  for  very  little  government  involvement,  but  over  the 
past  year  and  a  half  we've  had  enough  consumer  anxiety  that  government 
involvement  is  probably  necessary,"  says  the  Privacy  Council's  Clayton.  "But  I 
don't  mean  heavy-handed  involvement." 

Santanu  DasGupta,  VP  of  business  development  at  USAGreetings.com  Inc., 
an  online  greeting-card  company,  says  legislation  will  be  necessary  if  more 
companies  try  to  pull  a  Toysmart.com-promising  not  to  sell  data  and  then 
doing  it  anyway.  USAGreetings.com  collects  E-mail  addresses  and  names,  but 
DasGupta  says  the  company  won't  sell  any  customer  data  under  any 
circumstances.  "Toysmart.com  was  in  liquidation,  and  so  it  felt  that  the 
customer  information  was  an  asset,"  he  says.  "But  generally,  I  don't  think 
companies  will  treat  customer  data  that  way.  Instead,  they'll  use  the 
information  for  enhancing  their  company." 


Others  are  less  optimistic.  "There's  no  way  in  the  world  I'm  going  to  trust 
marketers  to  take  the  moral  high  ground  when  it  comes  to  storing  and  selling 
information  about  me,"  says  Matt  Curtin,  founder  of  Interhack  Corp.,  a  small 
company  in  Columbus,  Ohio,  that  provides  products  and  services  for  security 
and  privacy.  Still,  Excite®  Home's  Kelly  worries  that  government  regulation 
may  go  too  far.  "Anything  that's  going  to  be  done  has  to  be  done  very  carefully, 
because  the  whole  medium  of  the  Internet  is  about  data  exchange,"  he  says. 


That  gets  to  the  heart  of  the  dilemma.  "It's      Governments  Role 
called  the  Information  Age  for  a  reason,  and      shouM  Die  pmrnraMd  set  online 
it's  because  information  is  now  used  as  a  prtvacy  policies? 

currency  and  a  tool,"  Clayton  says.  u%  No 


In  general,  privacy  legislation  focuses  on 
three  major  issues:  what  information  gets 
collected;  whether  to  regulate  the  use  of 


6%   Yes,  but  drily  in 

industry- specihe  basis 


information  by  the  sites  to  whom  consumers  »S™  ***«»  survey  <* 
give  it  or  only  if  it's  shared  with  third  parties; 

and  whether  legislation  involving  online  businesses  should  differ  from  that 
involving  offline  businesses,  says  Russ  Gates,  global  director  of  technology 
risk  consulting  at  Arthur  Andersen.  "My  advice  would  be  that  regardless  of  the 
exact  nature  of  legislation  that  ultimately  occurs,  you're  going  to  have  to  give 
people  the  ability  to  opt  in  or  out,  and  you're  going  to  have  to  explain  in  English 
what  vou  do  with  the  data."  Gates  savs. 
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Sen.  Kerry's  bill  turns  enforcement  of  the  guidelines  over  to  state  attorneys 
general,  requiring  them  to  notify  the  FTC  before  prosecuting  violators.  It  also 
sets  up  a  private  commission  to  study  how  well  the  industry  is  doing  at 
regulating  itself,  gives  the  commission  up  to  one  year  to  report  its  findings  to 
Congress,  and  declares  a  moratorium  on  state  privacy  legislation  until  then> 

continued. ..page  3 
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The  legal  activity  has  been  a  wake-up  call  for 
companies  to  review  their  privacy  policies,  establish 
privacy  boards,  work  with  government,  and  even  hire 
full-time  privacy  executives.  In  March,  Doubleclick 
created  a  privacy  board;  today,  that  board  is  made  up 
of  former  New  York  state  attorney  general  Robert 
Abrams  and  Daniel  Weitzner,  technology  and  society 
domain  leader  of  the  World  Wide  Web  Consortium. 
Doubleclick  also  named  Jules  Polonetsky,  a  former 
commissioner  to  New  York  City  mayor  Rudolph 
Giuliani,  as  its  chief  privacy  officer. 

Also  in  March,  Internet  media  company 
Excite  ©Home  appointed  Chris  Kelly  as  its  chief 
privacy  officer;  Kelly  had  held  that  position  at  Kendara 
Inc.,  which  Excite®  Home  acquired.  Previously,  Kelly 
was  an  attorney  at  the  Palo  Alto,  Calif.,  law  firm 
Wilson,  Sonsini,  Goodrich  &  Rosati,  where  he 
counseled  numerous  companies  on  privacy  policies. 

Such  efforts  may  be  too  late  to  fend  off  federal  action. 
In  May,  the  FTC  called  on  Congress  to  more 
rigorously  protect  consumers  via  laws  that  establish 
standard  practices  for  collecting  information  online. 
The  recent  recommendation  for  legislation  was  the 
result  of  an  FTC  survey  that  found  only  20%  of  all 
Web  sites,  and  less  than  half  of  the  100  most-popular 
Web  sites,  use  industry-accepted  fair  information 
practices  such  as  letting  users  opt  out  of  providing 
data  on  themselves  or  their  Web  surfing  activities. 

After  the  release  of  that  survey,  Sen.  Ernest  Hollings, 
D-S.C,  led  a  group  of  senators  in  introducing  the 
Consumer  Privacy  Protection  Act,  which  requires 
online  sites  to  obtain  consumers'  consent  before 
collecting  data  and  give  them  the  choice  to  opt  out  of 
supplying  information.  Another  bill  is  expected  to  be 
introduced  this  month  by  Sen.  John  Kerry,  D-Mass., 
who  argues  that  "consumers  want  an  Internet  that's 
free  and  that  gives  them  more  choices,  rather  than 
fewer."  A  compromise  between  self-regulation  and 
strong  government  regulation,  Kerry's  bill  will 
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In  May,  the  annual  convention  of  the  National 
Association  of  Attorneys  General  in  Seattle  focused 
entirely  on  the  privacy  issue,  and  a  number  of  states 
already  have  privacy  regulation  or  court  cases  against 
offenders  in  the  works.  "The  attorneys  general  are  the 
people  who  took  on  the  tobacco  companies,  and  they 
have  the  same  attitude  toward  protecting  privacy," 
says  privacy  expert  Robert  Ellis  Smith,  the  keynote 
speaker  at  the  conference  and  the  man  who  literally 
wrote  the  definition  of  privacy  for  World  Book 
Encyclopedia. 

Washington  state  attorney  general  Christine  Gregoire 
in  January  proposed  legislation  giving  consumers  the 
right  to  opt  out  of  the  use  of  their  personal 
information,  requiring  their  "explicit  and  written 
consent  before  sensitive,  financial  information  like 
account  numbers  and  access  codes"  can  be  shared 
or  sold;  giving  victims  of  identity  theft-when  someone 
steals  your  personal  data  and  pretends  to  be  you- 
greater  protections;  and  establishing  consumer 
protection  penalties  that  allowed  victims  of  privacy 
slips  to  "pursue  and  recover  actual  damages." 

The  effort  failed.  "Washington  state  expected  smooth 
sailing  for  the  privacy  package,"  says  Smith.  "But  it 
was  shot  down  by  strong  lobbying  behind  closed 
doors." 

Meanwhile,  the  IT  industry  is  pushing  for  its  own 
solutions  in  an  effort  to  avoid  legislation.  Groups  such 
as  the  Online  Privacy  Alliance  and  the  Network 
Advertising  Initiative  are  meeting  privately  with  the 
FTC  to  come  up  with  alternatives.  The  Internet 
Advertising  Bureau  issued  a  set  of  online  data  privacy 
guidelines  for  its  300  member  companies.  And  seven 
U.S.  companies  with  online  interests-America  Online, 
AT&T,  Dell  Computer,  IBM,  Microsoft,  Network 
Solutions,  and  Time  Warner-in  June  formed  the 
Electronic  Commerce  and  Consumer  Protection 
Group,  with  a  site  (www.ecommercegroup.org)  that 
lists  voluntary  guidelines  for  the  protection  of  E- 
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"Congress  is  hesitant  to  regulate  the  Internet  because 

dynamic  growth  and  innovation  are  inherently  at  odds 

with  the  heavy  hand  of  government,  and  you  can't  hire       send  us  Your  Feedback 

enough  policemen  to  police  the  Internet,"  says  Daniel 

Jaye,  co-founder  and  chief  technology  officer  of  Engage  Inc.,  an  online 

marketing  company.  "It's  not  clear  how  legislation  will  stop  a  site  based  in  the 

Cayman  Islands." 

Congress  already  has  passed  bills  dealing  with  the  most  egregious  examples 
of  misuse  of  personal  information.  The  Gramm-Leach-Bliley  Act,  signed  into 
law  in  November,  bars  financial  institutions  from  disclosing  customer  account 
numbers  or  access  codes  to  third  parties  for  telemarketing  or  other  direct- 
marketing  purposes,  and  lets  consumers  opt  out  of  sharing  personal  financial 
information.  The  Medical  Financial  Privacy  Protection  Act  shields  medical  data, 
and  the  Children's  Online  Privacy  Protection  Act  provides  safeguards  for 
minors. 

Still,  more  bills  keep  coming  up  on  the  Hill.  Last  month,  Rep.  James  Leach,  R- 
lowa,  chairman  of  the  House  Banking  and  Financial  Services  Committee, 
introduced  a  bill  requiring  that  consumers  give  permission  before  their  financial 
institution  can  use  medical  information  to  decide  whether  to  issue  them  credit; 
Senate  Bill  809  requires  the  FTC  to  issue  and  enforce  regulations  for  the  use  of 
online  personal  data,  and  authorizes  the  states  to  prosecute;  House  Bill  3321 
offers  an  electronic  bill  of  rights. 

Sen.  Kerry  says  introducing  a  bill  now  will  lay  the  groundwork  for  next  year. 
"This  year,  I'm  trying  to  send  a  strong  message  to  the  industry  and  to  those 
pushing  for  a  heavy-handed  approach  to  privacy  legislation,"  he  says.  "I  hope 
my  bill  will  create  an  incentive  for  those  on  both  sides  to  come  together  without 
slowing  the  growth  of  the  Internet." 

There's  still  a  chance  the  industry  will  come  up  with  a  technical  solution  to  the 
privacy  problem.  Last  month  the  World  Wide  Web  Consortium,  the  group 
responsible  for  guiding  development  of  Internet  standards  such  as  the 
Extensible  Markup  Language,  conducted  the  first  public  tests  of  its  Platform  for 
Privacy  Preferences  Project,  known  as  P3P.  It  will  let  computer  users  set 
privacy  preferences  in  their  browsers;  the  technology  will  then  check  each 
Web-site  user's  visit  to  determine  whether  the  site  matches  the  user's 
preferences.  More  than  10  organizations  participated  in  the  P3P  tests, 
including  Engage,  IBM,  and  Microsoft.  P3P  has  some  influential  supporters: 
The  White  House  issued  a  press  release  supporting  the  technology; 
Excite  ©Home's  Kelly  says  he  supports  P3P,  too. 

But  not  everyone  is  a  big  fan,  mainly  because  P3P  will  share  information  from  a 
Web  server  with  a  browser  that  "reads"  the  privacy  policy.  Detractors  say  the 
standard  is  too  server-centric,  not  allowing  a  mechanism  for  users  to  determine 
if  a  site  is  actually  complying  with  its  stated  policy. 

The  P3P  effort-and  President  Clinton's  backing-seems  to  indicate  that  any  bill 
that  might  make  it  through  Congress  will  fail  at  the  White  House.  "It's  a  signal 
that  Clinton  supports  the  self-regulatory  approach,"  Fowler  says. 

But  don't  forget:  It's  an  election  year.B 

return  to  page  1,  2 
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High-tech  privacy  sleuth  joins 
research  center 


By  MATT  RICHTEL 

c.2000  N.Y.  Times  News  Service 

Richard  M.  Smith,  a  software  engineer  turned  high-tech  sleuth  who  tracks  how 
personal  data  is  gathered  via  the  Internet,  said  Tuesday  that  he  would  join 
forces  with  researchers  at  the  Privacy  Center,  a  new  group  based  at  the 
University  of  Denver  that  investigates  privacy  concerns  in  the  information  age. 

Organizers  of  the  center  said  they  would  gather  data  on  whether  and  how 
personal  information  was  captured  by  software  makers,  operators  of 
communications  systems  and  Internet  services. 

Smith  said  the  center  would  focus  initially  on  whether  personal  privacy  was 
jeopardized  by  the  use  of  wireless  phones  with  Web  access,  digital  television 
set-top  boxes,  software  that  can  send  user  information  back  to  its  maker  over 
the  Internet  and  other  such  new  technologies. 

"We'll  look  at  anything  to  do  with  a  computer,  and  stuff  that  is  networked 
together,"  said  Smith,  who  helped  track  the  possible  origins  of  the  malicious 
"Melissa"  and  "I  Love  You"  computer  programs.  "We'll  focus  on  how  we're  being 
monitored  in  our  daily  lives." 

He  added  that  he  was  looking  forward  to  helping  other  people  use  some  of  the 
techniques  he  had  developed.  "We're  trying  to  train  other  people  to  do  the  work 
I  do,"  said  Smith,  a  co-founder  of  Phar  Lap  Software,  Cambridge,  Mass. 

Among  Smith's  accomplishments  in  recent  years  was  the  discovery  that  the 
Microsoft  Word  program  embedded  a  unique  identifier  in  users'  computers  that 
was  sent  back  to  Microsoft  when  the  software  was  registered.  Microsoft 
subsequently  stopped  putting  the  identifier  in  the  software.  Smith  has  also 
explored  the  data-collection  practices  of  Amazon.com  and  RealNetworks.  He 
filed  a  complaint  last  year  with  the  Federal  Trade  Commission  asserting  that 
Alexa  software,  a  subsidiary  of  Amazon,  could  gather  far  more  personal  data 
about  consumers  than  Amazon  told  customers  it  was  collecting. 
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Smith  technically  is  not  affiliated  with  the  University  of  Denver,  but  has  signed 
on  as  the  chief  technology  officer  of  the  Privacy  Foundation.  The  foundation  is  a 
Denver-based  nonprofit  agency  -  also  scheduled  to  be  announced  today  -  that 
is  financing  the  privacy  center.  The  Privacy  Foundation  was  started  and  is 
largely  underwritten  by  Peter  Barton,  a  Denver  entrepreneur  and  former  chief 
executive  of  the  Liberty  Media  Corp. 

The  financing  will  help  support  research  at  the  university  by  David  Martin,  an 
assistant  professor  of  math  and  computer  science,  and  three  associates.  They 
will  work  with  Smith,  who  will  work  mainly  from  his  home  in  Brookline,  Mass. 

"Rather  than  Richard  being  the  lone  ranger,  he's  going  to  have  a  posse  to  help 
him,"  said  Stephen  Keating,  executive  director  of  the  Privacy  Foundation. 
Keating  said  the  foundation's  first-year  budget  would  be  around  $1  million. 
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Class-action  lawsuits  becoming  the  way 
to  police  privacy  matters  on  the  Internet 


By  Brenda  Sandburg 

American  Lawyer  Media 

Already  bedeviled  by  legislators  and 
consumer  advocates  about  their  priva- 
cy policies,  Internet  companies  now 
have  a  new  foe  to  contend  with:  the  class-ac- 
tion bar. 

Several  class-action  lawsuits  have  been 
filed  against  online  companies,  challenging 
the  information  the  companies  collect  on 
users. 

The  suits  come  at  a  time  when  concern 
over  online  privacy  is  peaking.  Last  month  the 
Federal  Trade  Commission  issued  a  report  to 
Congress  calling  for  privacy  legislation.  The 
agency,  which  has  been  monitoring  commer- 
cial Web  sites  for  several  years,  said  compa- 
nies have  not  been  successful  in  regulating 


themselves  and  that  most  do  not  adequately 
disclose  the  information  they  collect. 

And  several  bills  are  pending  in  Congress. 
The  most  closely  watched  is  the  Consumer 
Privacy  Protection  Act,  S.  2606,  introduced 
by  Sen.  Ernest  Hollings,  D-S.C,  the  day  after 
the  FTC  issued  its  report.  As  mandated  by  the 
FTC,  the  bill  would  require  commercial  Web 
sites  to  notify  consumers  what  information  is 
collected  about  them  and  how  it  is  used;  per- 
mit consumers  to  choose  whether  this  data 
can  be  used;  give  consumers  access  to  the  da- 
ta; and  make  sure  the  information  is  secure. 

As  an  alternative  to  a  legislative  fix,  the 
World  Wide  Web  Consortium,  or  W3C,  is  de- 
veloping a  protocol  to  enhance  online  privacy. 

See  E-BUSINESS,  Page  All 
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"The  evolution  of  this  is  going  so  fast  that 
companies  are  doing  thing-.  Ihcy  had  not 
done  six  months  ago."  said  Alan  Mansfield, 
a  partner  at  Milherg  Wciss's  San  Diego  of- 
fice and  one  of  the  plaintiffs'  attorneys  in 
class  actions  against  the  lour  companies. 
"The  rides  may  be  ohsolcte  by  fhe  lime  leg- 
islation is  adopted." 

TRACKING  ONLINE  FOOTSTEPS 
The  first  privacy  class  actions  were  filed 
late  last  year  in  both  federal  and  stale 
courts.  In  most  instances,  companies  lace 
more  than  one  class  action.  For  example. 
15  suits  have  been  filed  against  online  ad- 
vertiser Doubleclick.  The  federal  cases 
have  been  consolidated  into  /"  re  Dou- 
bleclick Inc.  I'rivticy  Litigation.  00-641. 
which  is  pending  in  the  federal  court  for 
the  Southern  .District  of  New  York. 

The  complaints  could  lurn  into  a  pot  of 
money  for  plaintiffs  firms.  Mansfield  said 
statutory  damages  "could  be  in  die  hun- 
dreds of  million  of  dollars  for  each  of  Ihc 
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'Companies  can 
change  the  rules  at  a 
drop  of  a  hat.  What 
they  throw  away 
today,  six  months 
later  they  can  keep.' 
—  Internet  consultant 
Richard  Smith 


lificniion  numbers,  to  secretly  track  users' 
activities  on  the  Internet  and  collect  their 
personal  information.  When  an  individual 
visits  a  Web  site  that  displays  a  Dou- 
blcClick  ad,  n  eookie  is  implanted  on  the 
user's  computer  system. 

nut  DouhlcClick  contends  that  Ihc  visi- 
tors retain  their  anonymity.  "There  is  no 
personally  identifiable  information  avail- 
able from  placement  of  a  cookie."  said 
Doubleclick's  aitorncy.  Morrison  A  F-'oer- 
stcr  partner  Lori  Sclicchlcr.  Rather,  she 
said,  a  cookie  is  used   to  enable   Dou- 
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anonymous  visitors  see  a  given  ad. 

Doubleclick  had  planned  u>  combine 
names  with  anonymous  user  activity  on 
the  Internet  following  its  merger  last  year 
with  Abacus  Direct.  Abacus  has  a 
database  brm  formation  about  direct-mail 
shoppers  rhat  it  shares  with  catalog  com- 
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Doubleclick's 
attorney.  Morrison 
&  Foerster  partner 
Lori  Srmechter, 
says  her  client 
tracks  users' 
activities  in  order 
to  determine  how 
many  unique 
anonymous  visitors 
see  a  given  ad. 


Web  sites  for  several  yeais,  said  compa- 
nies have  not  been  successful  in  regulating 
themselves  and  that  most  do  not  adequate- 
ly disclose  the  information  they  collect. 

Several  bills  arc  pending  in  OowgtCBS, 
The  most  closely  watched  is  the  Consumer 
Privacy  Protection  Act,  S.  2606,  intro- 
duced by  Sen.  Ernest  Hollings,  D-S.C,  the 
day  after  the  FTC  issued  its  report.  As 
mandated  by  the  FTC,  the  bill  would  re- 
quire commercial  Web  sites  to  notify  con- 
sumers what  information  is  collected  about 
them  and  how  it  is  used;  pormit  consumers 
lo  choose  whether  this  data  can.be  used; 
give  consumers  access  to  the  data;  and 
make  sure  the  information  is  secure. 

As  an  alternative  lo  a  legislative  fix.  the 
World  Wide  Web  Consortium,  or  W3C,  is 
developing  a  protocol  to  enhance  online 
privacy.  The  standard,  called  Platform  for 
Privacy  Preferences,  or  P3P,  would  enable 
Internet  users  to  select  the  type  of  privacy 
policy  they  wish  to  use.  A  web  server 
would  automatically  communicate  hou'  ii 
collects  and  shares  data  and  a  user's 
browser  would  only  go  to  sites  that  meet  its 
privacy  specifications. 

While  many  companies  believe  that  a 
technology  fix  is  preferable  to  legislation, 
some  privacy  advocates  say  the  P3P  falls 
short  of  protecting  consumers  privacy. 
Last  week  the  Electronic  Privacy  Informa- 
tion Center,  Junkbustcrs  Corp.  and  other 
privacy  proponents  released  a  report  criti- 
cal of  the  protocol,  which  is  still  in  draft 
form. 

Jason  Catlett,  president  or  Junkbustcrs, 
an  online  privacy  advocate,  believes  legis- 
lation is  the  only  way  10  assure  consumer 
privacy.  He  said  privacy  problems  exist 
"because  the  United  States  doesn't  have 
legislation  that  requires  information  to  be 
I' 'eated  in  a  fair  and  transnarent  way  " 

Brclsford  concurs.  "Having  some  clarity 


consumer  advocates  and  Ihc  initiation  of 
an  ITC  investigation,  DouhlcClick  an- 
nounced in  March  that  il  would  not  link  of- 
fline and  online  d.ila  until  the  government 
and  industry  agreed  on  privacy  Standards. 

As  to  ihc  company's  current  practices. 
Milherg 's  Mansfield  said  DouhlcClick  is 
playing  a  game  of  semantics,  that  although 
DouhlcClick  doesn't  obtain  personal  in- 
formation every  time  someone  visits  a 
Web  site  with  its  banner  ad.  specific  infor- 
mation is  obtained  over  lime  that  enables 
DouhlcClick  lo  compose  a  Web  surfer's 
profile. 

For  example.  Richard  Smith,  an  Internet 
consultant  in  Brookline,  Mass.,  said  he  re- 
cently found  that  visitors  lo  Red  Herring's 
Web  site  typed  in  their  e-mail  addresses  in 
order  to  subscribe  to  a  Keel  Herring 
newsletter.  The  e-mail  address  was  then 
automatically  scnl  to  DouhlcClick.  While 
Smnh  said  DoubleClick  probably  doesn't 
use  such  personally  identifiable  informa- 
tion, he  said  the  issue  is  that  the  company 
doesn't  inform  consumers  what  it  saves 
and  what  it  throws  away. 

"Companies  can  change  the  rules  ai  a 
drop  of  a  hat,"  Smith  said.  "What  they 
throw  away  today,  six  months  later  they 
enn  keep." 

It's  the  poicntial  for  companies  to  do 
harm  in  the  future  that  has  gotten  many 
consumer  advocates  riled  up. 

"There  is  heightened  concern  not  about 
what  you  are  doing  or  collecting  now,  but 
aboiu  what  you  might  do  in  the  future  as  a 
result  of  industry  mergers  and  consolida- 
tion." said  James  Brclsford.  the  managing 
purtner  of  Pcrkins_Coic;s  Menlo  Park  and 
San  Francisco  offices. 

Brclsiord  represents  Amazon.com  Inc. 
and  its  affiliate  Alexajntcrnct  in  a  privacy 
class  action.  TrrFsuii  alleges  that  Alcxa's 
software  interfaces  with  n  user's  Internet 
browser  to  obtain  information  about  the 
Web  sites  the  individual  visits.  ,  ■, 
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files.  The  complaint  against  Buy. com 
claims  the  online  superstore  collects  per- 
sonal information  and  transmits  it  lo  ad- 

vi  nising  companies. 

GAGGLE  OF  PLAYERS 
Concern  over  online  privacy  is  at  an  all 
time  high.  Last  monlh  the  Federal  Trade 
Commission  issued  a  report  to  Congress 
calling  for  privacy  legislation.  The  agency, 
which  has  been   monitoring  commercial 
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said. 

Bu;  iit.ga.ion,  ho  says,  v  i'i  :' 
bring  about  new  policy.  The  plaintiffs,  he 
saysT  arc  attempting  lo  exploit  consumer 
worries  aboul  online  privacy. 

Milbcrg  Weiss'  Mansfield  believes  it's 
the  Internet  companies  who  are  exptossms 
the  situation.  "Rather  than  trying  to  fix  the 
problem,  companies  arc  trying  to  make 
[their  activilics]  more  surreptitious." 

Reporter  Brenda  Sandburg  s  e-mail  ad- 
dress is  hsandburg@thcrecorder.com. 


The  End  Of  History 


The  imperman- 
ence  of  Web 
pages  could  aid 
those  seeking 
to  evade 
accountability 


On  May  23,  2000.  The  Boston  Globe  pub- 
lished a  critical  review  of  George  W. 
Bush's  military  record,  which  reported  that 
during  the  early  1970s  there  were  two  years  when 
he  was  in  the  Houston  Air  National  Guard  but 
never  performed  any  of  the  duties  associated  with 
his  commission.  Obviously,  this  isn't  the  kind  of 
news  that  makes  a  candidate's  day. 

1  mention  this  story  to  illustrate  a  much  larger 
issue,  one  that  has  nothing  to  do  with  how  I  feel 
about  George  Bush.  Here's  the  real  question:  [fall 
record-keeping  moves  onto  the  Web,  will  anyone 
be  able  to  check  facts?  Won't  it  be  easy  to  change 
old,  embarrassing  records? 

This  isn't  as  straightforward  as  you  might 
think.  On  the  one  hand,  it  seems  to  be  a  good  thing 
that  history  can  be  preserved,  indexed  and 
searched  electronically,  instead  of  having  to  rely 
on  ink  marks  on  paper  which  degrades  with  age. 
and  plow  through  reams  of  often  unorganized  and 
unindexed  paper  records. 

However,  there's  already  been  at  least  one 
instance  where  history  deemed  to  be  embarrass- 
ing was  simply  erased.  In  a  letter  to  its  readers, 
on  June  1,  1998  the  editors  of  The  New  Repub- 
lic revealed  that  they  had  published  41  articles 
by  an  author  named  Stephen  Glass,  articles 
which  they  subsequently  learned  were  based  on 
fabrications. 

The  editors  promptly  dismissed  Glass  and 
issued  an  apology,  but  they  took  one  additional 
step:  They  removed  all  of  Glass'  articles  from  the 
on-line  version  of  the  magazine.  The  article  list- 
ings also  disappeared  from  the  archive  Web  pages 
entitled  "Complete  Table  of  Contents."  If  this 
magazine  were  only  published  on-line,  the  ques- 
tionable articles  would  be  completely  gone,  van- 
ished, as  they'd  never  been  published. 

It's  important  to  note  that  not  all  publications 
react  the  same  way.  The  Boston  Globe  endured  a 
similar  humiliation,  involving  articles  by  Patricia 
Smith.  She  also  was  fired,  but  her  articles  arc  still 
on  The  Globe's  website.  Interestingly,  however, 
there  is  no  editorial  footnote  or  other  indication 
that  the  facts  within  the  articles  have  come  into 
question. 

My  informal  poll  of  other  journalists  on  hens 
content  errors  are  handled  in  on-line  publica- 
tions revealed  a  wide  range  of  responses,  rang- 
ing from  "we  have  no  policy"  to  "we  would  sim- 
pl\  correct  the  error."  Clearly  this  problem  is  too 
new  for  any  consistent  industry  practice  to  have 
emerged. 


There  is  No  History 

I  first  started  thinking  about  this  topic  when  I  was 
trying  to  track  the  changes  in  the  Internet  and  net- 
work vendors.  The  sites  like  Kej/note  Systems 
(wwu.keynote.com)  that  have  measurements 
and/or  indices  of  network  performance  only  main- 
tain a  limited  amount  of  data  online  for  a  very 
short  period  of  time.  When  you  ask  to  review — or 
even  to  buy— historical  data,  you  quickly  learn 
that  it's  not  available.  This  makes  the  job  of  fore- 
casting network  traffic  and  technology  a  lot 
tougher.  Just  imagine  trying  to  forecast  the  weath- 
er without  historical  meteorological  data. 

The  networking  industry  is  a  leading  indicator 
of  how  the  rest  of  the  economy  will  operate,  and 
when  companies  promise  to  deliver  something,  a 
lot  rides  on  their  word — network  planning  and 
procurement  cycles  rely  on  information  about 
future  releases,  as  do  stock  prices.  When  major 
vendors  (and  wannabes)  miss  promised  delivery 
dates,  it  usually  sparks  negative  press,  and  credi- 
bility lost  is  hard  to  regain.  That's  why  the  good 
PR/marketing  firms  advise  their  clients  to  make 
sure  the  story  they  give  out  publicly  is  the  truth. 

Today,  however.  Web-based  PR  seems  to  have 
forgotten  that  basic  principle.  Indeed,  within  just 
the  past  three  months,  I've  seen  two  network  start- 
ups totally  change  their  respective  stories. 
They've  redone  their  websites  and  briefings  with 
new  content.  Their  original  approach  to  the  mar- 
ket has  disappeared,  as  if  it  never  existed. 

History  and  Accountability  Matter 

As  I  was  researching  this  column.  I  ran  into  a  lot 
of  skepticism  about  the  need  to  be  vigilant  regard- 
ing the  accuracy  o\  information  in  the  'Net.  Some 
people  believe  that  no  one  would  dare  change 
content  on  a  website  because  it  would  be  too 
embarrassing  if  they  were  caught. 

Unfortunately,  that's  an  increasingly  naive 
view.  Indeed,  while  much  has  been  written  about 
the  "Net  ushering  in  the  end  of  privacy,  it  seems  to 
also  be  ushering  in  the  end  of  accountability. 

I  challenge  any  BCR  reader  to  find  the  subtle 
changes  to  a  product  specification! si  on  a  Web- 
site. How  many  people  purchase  online  based  on 
information  only  seen  online ?  If  Vendor  A  comes 
to  realize  that  people  arc  choosing  Vendor  B's 
product  because  of  the  technical  data  on  B's  Web 
site,  how  long  do  you  think  it  will  take  for  the  con- 
tent on  Vendor  A's  website  to  change'.' 

Remember,  the  game  is  changing.  In  the  not 
too-distant  future,  when  you  pick  up  a  prescription. 
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instead  of  getting  details  about  the  medication  on 
a  tough  to  read,  tightly-folded  slip  of  paper,  you'll 
be  directed  to  the  pharmaceutical  company's  web- 
site to  learn  about  the  drug's  dosage,  interactions 
and  cautions  for  use.  But  will  you  be  able  to  find 
out  if  the  recommended  dosage  has  changed  over 
time — say,  from  200  mg  two  years  ago,  to  1 00  mg 
last  year  and  50  mg  today?  Why  is  the  dosage 
trending  down?  Good  luck  finding  the  answers. 

Once  the  'Net  becomes  the  storage  center  for 
our  important  documents,  imagine  how  easy  it 
will  be  to  fix  a  missed  diagnosis  on  an  old  medical 
exam,  to  create  a  sudden  change  in  zoning  for  the 
property  next  door,  to  revise  taxes  owed  or  prod- 
uct liability  data  and,  yes,  to  add  new  hidden 
charges  by  a  bank  or  phone  company.  (I  realize  the 
latter  already  occurs,  but  at  least  you  get  a  notice 
in  the  mail.  In  the  future,  you  won't  be  able  to 
decipher  charges  at  all.) 

Two  Solutions  to  Two 
Problems 

So  is  anything  to  be  done?  Well, 
the  outlines  of  solutions  are 
beginning  to  be  proposed.  One 
approach  is  to  create  some  kind 
of  Web  archive,  and  Brewster 
Kahle'  Internet  Archive  Founda- 
tion (www.archive.org)  is 
already  working  on  this  enor- 
mous task.  As  of  mid-June,  the 
foundation  had  archived  14  ter- 
abytes of  content,  fast  approach- 
ing the  total  textual  information 
held  by  the  Library  of  Congress.  The  size  is 
impressive,  but  its  use  is  limited  to  historians  who 
have  access  to  special  Unix-based  search  tools. 

The  archive  is  too  big  and  complex  to  be  mined 
by  a  consumer,  but  Alexa  Internet  (www.alexa. 
com)  provides  a  free  browser  plug-in  to  help  use 
the  Internet  Archive.  The  Alexa  software  is  a  col- 
laborative tool  by  which  the  foundation  gathers, 
manages  and  analyzes  the  multi-terabyte  archive. 
When  you  click  on  a  site,  a  special  toolbar  shows 
you  whether  an  archived  version  of  that  site  exists 
and,  if  it  does,  you  can  call  up  the  archived  version 
and  make  your  own  determination  regarding  any 
changes.  Unfortunately,  there  is  no  tool  that  per- 
forms a  '•compare"  function — to  show  if  and 
where  any  changes  have  occurred. 

The  archived  version  also  includes  everything 
on  that  particular  Web  page.  For  example,  an  old 
page  that  included  a  notation  in  the  current  weath- 
er will  likely  be  different  from  today's  weather. 
Alexa  makes  browsing  more  informative,  but  the 
average  age  of  the  content  it  is  comparing  today's 
site  against  is  only  about  two  months  old.  A  key 
limitation  is  storage  and  so  it's  not  clear  whether, 
years  from  now,  a  website  such  as  Alexa  will  be 
able  to  serve  a  useful  purpose  to  review  histori- 
cal— and  huge — monthly  archives. 

Another  approach  to  the  problem  is  to  authen- 


Archiving  content 

for  verification 

purposes  requires 

enormous  resources 


ticate  what's  in  the  Web  archives.  A  landmark  bill 
is  working  its  way  through  Congress  that  puts  full 
legal  backing  behind  digital  signatures.  That's 
good,  but  not  enough;  as  business  moves  exclu- 
sively to  the  Internet — i.e.,  no  paper  copies — I 
hope  the  security  industry  will  look  at  how  to 
"certify"  websites.  We  will  all  benefit  from  a 
much  larger  market  for  digital  certificate  technol- 
ogy- 
Imagine  a  service  that  creates  and  escrows  a 
message  digest  or  hash  code  of  each  Web  page 
submitted  by  a  client  website.  The  website  could 
post  a  "verify  this  page"  button  on  its  site,  so  any 
reader  of  the  page  could  re-run  the  hash  and  check 
it  against  the  escrowed  code.  The  reply  would 
state  that  from  a  date-certain  the  content  of  the 
page  had  not  been  modified.  The  service  could 
charge  to  have  the  page  placed  in  escrow  and  add 
another  very  small  verification  charge  to  the  orig- 
inating website  per  page  that  was 
checked. 

Public  standards  for  digital 
signature  exist — e.g.,  RFC  1321 
(a.k.a.  MD5) — and  are  already 
widely  used  by  the  Unix  and 
Linux  communities;  RSA  .  or 
PGP  can  be  used  as  well.  The 
key  is  to  get  a  neutral  message- 
digest  escrow  company  running, 
and  then  attract  websites  to  join 
the  verification  service.  The  con- 
sumer would  not  need  any  spe- 
cial software  or  hardware;  the 
site  and  its  contents  are  being 
authenticated,  not  the  user. 

The  escrow  would  only  need  to  store  the  hash 
code  and  some  clear-text  source  identification 
data.  A  hash  can  be  stored  in  one-thousandth  the 
space  required  to  archive  the  total  contents  of  the 
original  Web  page.  This  approach  would  verify 
sites  that  care  about  their  content  rather  than  the 
sites  that  are  popular. 

Such  a  service  would  not  prevent  removing 
content  all  together  but  it  would  make  hiding 
changes  much  more  difficult.  In  The  New  Repub- 
lic example  above,  the  articles  might  be  removed, 
but  the  original  Table  of  Contents  for  those  issues 
would  be  viewable,  and  the  hash  of  the  contents 
would  discover  any  missing  text. 

The  "Net  is  a  massive  change  agent,  but  with- 
out historical  records,  the  result  is  chaos  rather 
than  progress.  It  is  time  for  the  'Net  to  grow  up 
and  become  accountable  □ 


Peter  Sevcik  is  president  of  Net  Forecast  in 
Waltham,  MA,  and  is  a  leading  authority  on 
Internet  traffic,  performance  and  technology.  He 
has  contributed  to  the  design  of  more  than  100 
networks,  and  led  the  project  that  divided  the 
Arpanet  into  multiple  networks  in  1984,  which 
was  the  beginning  of  today's  Internet.  He  can  be 
reached  at  peter@netforecast.com. 
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Company  aims  to  preserve  Web  history 


July  7,  2000 

Web  posted  at:  2:02  p.m.  EDT  (1802 

GMT) 

From  staff  reports 

SAN  FRANCISCO  (CNN)  -  The 
Internet  provides  a  unique  glimpse 
into  the  lives  of  ordinary  people, 
much  like  newspapers  of  old,  but  little 
is  being  done  to  preserve  Web  pages 
for  future  historians.  One  non-profit 
company  is  trying  to  change  that. 

"We  have  a  shadow  of  the  world  that 
we're  able  to  capture  and  make 
available  to  the  future,"  said  Brewster 
Kahle,  founder  of  the  Internet  Archive. 
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larger 
Bytes  of  digital  history:  early  version  of 
CNN. corn's  nav  bar  (above);  story  page 
from  August  1995  (below) 


DISCUSSION: 


The  Internet  Archive  is  a  massive  collection  of  Web  sites  donated  by  the 
Alexa  Internet,  an  arm  ofAmazon.com.  It  preserves  those  Web  pages  that 
would  otherwise  be  wiped  from  computer  memories  and  lost  forever. 

"The  way  we're  able  to  pull  this  off  is  by  having  robots  that  go  around  and 
contact  every  Web  server  around  the  world  periodically,  and  download  each 
page  —  each  image  —  off  of  every  one  of  those  sites,"  Kahle  said. 

The  amount  of  information  stored  already  surpasses  in  volume  the  entire 
contents  of  the  Library  of  Congress. 

Begun  in  1996,  the  collection  included  only  text  until  this  year,  when  the 
Internet  Archive  began  collecting  images  at  a  rate  of  about  200  images  every 
five  seconds. 

But  many  Web  pages  already  are  lost. 

"I  don't  known  if  John  McCain  this  year  saved  some  of  the  Web  pages  that 
documented  the  fact  that  he  raised  a  tremendous  amount  of  his  campaign 
funds  on  the  Internet,"  said  David  Allison,  chairman  of  the  Division  of  IT  and 
Society  at  the  Smithsonian  Institution.  "Maybe  that  moment  in  history  is 
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gone. 


Some  organizations  activate  a  filter  so  companies  like  the  Internet  Archive 
can't  archive  their  content. 

For  now,  the  Internet  Archive  stores  part  of  its  collection  on  the  company's 
premises,  but  Kahle  hopes  the  archives  will  be  available  online  in  a  few 
years. 

Why  save  the  entire  Internet,  when  some  would  argue  that  most  of  it  is  junk? 
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Referring  to  newspapers  of  the  past,  Kahle  said,  "If  we  had  been  selective,  we 
probably  would  have  kept  all  the  articles  and  thrown  away  those  ads,  but  it's 
the  ads  that  the  historians  really  like.  That's  what  gives  them  a  much  better        Gear  up  for  t 
glimpse  of  what  life  was  like."  ame 
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CNN  Science  Correspondent  Ann  Kellan  contributed  to  this  report. 
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Using  The  Internet  To 
Increase  Sales 

Specialized  databases  contain  valuable  customer  data. 


The  amount  of  information  available  online  is  staggering.  According  to  statistics  compiled  by  Alexa  Internet,  the 
World  Wide  Web  now  contains  over  20  million  "content  areas."  A  content  area  can  be  a  stand-alone  site  or  a  major 
section  within  a  corporate  site.  Amazingly,  over  1.5  million  pages  of  new  information  are  added  to  the  World  Wide 
Web  each  day. 

Material  handling  companies  are  learning  that  the  Internet  can  dramatically  increase  the  productivity  of  sales  and  rela- 
tionship people.  The  process  of  identifying  prospective  clients  and  gathering  detailed  background  information  on  those 
prospects  can  now  be  accomplished  in  days  instead  of  months  or  years.  Salespeople  can  spend  less  time  looking  for  clients 
and  more  time  developing  customized  solutions  that  work.  Like  the  proverbial  pot  of  gold  at  the  end  of  the  rainbow,  sales- 
people who  have  invested  the  time  necessary  to  tackle  the  Internet  learning  curve  are  reaping  huge  rewards. 

Prospecting 

A  15-minute  Internet  research  session  should  precede  every  telephone  call  to  a  new  prospect.  This  session  will  give  the  sales- 
person valuable  background  information  on  the  company  being  called  and  will  help  make  an  excellent  first  impression. 

Put  yourself  in  the  prospect's  shoes  and  decide  which  of  the  following  two  approaches  would  have  the  most  positive 
impact  on  you: 

Traditional  Approach:  "Hi,  Fred.  My  name  is  Mary  Williams  and  I'm  the  regional  manager  for  Superb  Handling,  Inc. 
We  provide  a  full  range  of  products  and  services  to  meet  all  of  your  material  handling  needs.  We  work  with  the  most  high- 
ly respected  vendors  in  the  industry,  and  you  will  find  us  to  be  very  flexible  and  easy  to  do  business  with.  Do  you  have  any- 
thing you're  working  on  that  we  might  be  able  to  take  a  shot  at?" 

Researched  Approach:  "Hi,  Fred.  My  name  is  Mary  Williams.  We've  never  spoken  before,  but  I  wanted  to  call  and  let 
you  know  that  I  read  the  interview  with  you  in  the  December  issue  of  Industry  Week.  I  was  especially  interested  in  the 
expansion  plans  you  outlined  and  I  might  be  able  to  assist  you  with  the  equipment  problem  in  your  Philadelphia  plant. 
My  company,  Superb  Handling,  Inc.,  has  dealt  with  QRS  Forklift  for  a  number  of  years.  They  sell  an  excellent  product 

but,  as  you  stated  in  the  interview,  their  record  of  parts  availability  is  sometimes 
inadequate.  Our  parts  inventory  is  the  largest  in  the  region  and  our  fully  trained 
_^^flBfc^_  stafi  can  provide  on-site  service  seven  days  a  week." 

^(^^  Clearly,  the  researched  approach  will  get  the  prospect's  attention  because  it  is 

M^  J/k  sharply  foe  used  on  a  spe(  ifi<  need  that  has  already  been  arti<  ulated.  The  fact  thai 

the  salesperson  took  the  time  to  uncover  this  need  will  set  her  apart  from  her 
■       ^        ^j*S   ^P  competition. 

Search  Engines 

Users  gather  information  from  the  Internet  in  one  of  two  ways.  The  tradition- 

^^  al  and  most  widely  used  method  is  referred  to  as  "pull"  technology.  This  tech- 

^^t^  ^^^^t  nique  involves  the  use  of  search  tools  such  as  Yahoo,  HotBot,  Lycos,  Web<  Irawler, 

^fl  ^fl  InfoSeek,  etc.,  oi   proprietary  Web  sites  that  are  set  up  by  various  corporations, 

-  _     -   1\        ^^k  I  small  businesses,  government  agencies,  trade  associations  or  individuals.  Users  oi 

I    H  ^Bj^ '■■■&*'  pull  technology  are  generally  looking  for  information  about  a  specific  individual, 

■•  vJSm  ^fl  a  corporation,  a  particulai   investment  oi  some  other  topic.  They  run  the  sub- 

\  jjfiST         ^fl  ,>r*  ie<  ts  name  through  vai  ions  sean  li  tools  and  databases  and  analyze  the  results 

;:'*3filw  Kwil  Smir  for  information  thai  ma)  prove  useful  in  the  business  developmenl  effort. 

Each  of  the  major  Internet  search  tools  has  its  own  unique  method  of  gathering 
and  assembling  information.  The  most  common  method  involves  the  use  of  "robots" 
or  "spiders."  These  programs  scan  the  Internet  on  a  continuous  basis  looking  for 
new  information.  As  data  is  found,  a  summary  of  the  newly  located  resource  is  writ- 
ten to  a  master  index. 
When  a  user  performs  an  Internet  search  using  a  particular  tool,  the  query  is 
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actually  made  against  the  index  that  the  tool  has  built  and 
maintained  over  time.  Most  indexes  record  only  a  small 
portion  of  the  information  found  in  the  actual  Internet  site. 
Some  search  tools  limit  themselves  to  information  con- 
tained in  the  site's  first  page.  Others  will  only  index  words 
appearing  in  the  first  paragraph.  Still  others  record  only 
the  titles  of  major  sections.  This  limited  amount  of  infor- 
mation can  make  searching  difficult. 

Specialized  Databases 

A  much  more  efficient  way  to  gather  information  on 
prospective  clients  involves  the  use  of  specialized  databases. 
These  rich  resources  are  extremely  useful  but  can  be  diffi- 
cult to  find.  Specialized  databases  often  contain  very  valuable 
data  about  potential  customers  and  the  key  individuals  with- 
in those  organizations.  Searching  a  variety  of  databases  often 
leads  to  the  discovery  of  some  "common  ground"  between 
the  salesperson  and  the  prospect.  Having  detailed  back- 
ground data  prior  to  the  initial  meeting  with  a  prospective 
client  makes  a  positive  first  impression  and  sets  the  salesper- 
son apart  from  competitors  who  arrive  with  minimal  knowl- 
edge and  expect  the  client  to  bring  them  up  to  speed. 

Salespeople  find  that  specialized  databases  contain  valu- 
able corporate  financial  data  as  well  as  clues  to  a  prospective 
client's  business  philosophies,  strategies  and  existing  finan- 
cial relationships.  These  databases  often  can  provide  back- 
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ground  information  on  top  decision  makers,  which  may 
include  employment  history,  stock  options,  favorite  philan- 
thropic causes,  hobbies,  club  memberships,  etc.  Many  sales 
organizations  use  the  Internet  to  develop  "packages"  that  are 
studied  by  key  executives  prior  to  personal  visits  with  the 
client.  This  detailed,  current  information  helps  ensure  that 
the  executive  makes  an  excellent  impression. 

Intelligent  Agents 

The  second  method  of  gathering  information  from  the 
Internet  is  called  "push"  technology.  This  more  sophisti- 
cated technique  involves  the  use  of  intelligent  agents,  soft- 
ware tools  that  enable  users  to  specify  the  types  of  infor- 
mation they  wish  to  follow  on  an  ongoing  basis.  The 
intelligent  agent  monitors  events  in  real-time  and  notifies 
the  user  when  information  becomes  available  that  match- 
es their  pre-established  criteria.  Intelligent  agents  are  some- 
times referred  to  as  personal  news  services  because  they  fre- 
quently scan  wire  stories  from  major  news  agencies  such  as 
Dow  Jones,  Reuters  and  the  Associated  Press  and  save  those 
stories  that  reflect  the  personal  preferences  of  the  user. 
Most  of  the  major  Internet  search  tools  now  offer  some 
intelligent  agent  capabilities. 

Attempting  to  use  Internet  search  tools  or  intelligent 
agents  without  proper  training  can  be  a  frustrating  and 
unproductive  experience.  One  of  the  most  common  mal- 
adies faced  by  inexperienced  users  is 
"information  overload."  This  occurs 
when  a  user  enters  a  search  request 
that  is  not  properly  formatted  or 
attempts  to  use  an  intelligent  agent 
without  understanding  how  the 
resource  works.  An  effective  training 
program  can  ensure  that  salespeople 
have  the  tools  necessary  to  be  success- 
ful while  maximizing  their  investment 
of  time. 

Salespeople  must  access  all  tools  at 
their  disposal  that  can  differentiate 
them  from  the  competition  and  allow 
them  to  develop  the  broadest  possi- 
ble relationship  with  their  prospects. 
The  more  information  a  salesperson 
has,  the  better  prepared  he  or  she 
will  be  to  approach  potential  cus- 
tomers with  ideas,  suggestions  and 
alternatives  that  are  appropriate  to 
their  unique  situations. 

We  are  at  the  dawn  of  an  exciting 
era  when  aggressive  material  handling 
companies  will  use  Internet  tools  to 
leapfrog  over  traditional  competitors 
and  take  their  customers  away  from 
them.  Is  your  company  prepared? 

Jack  Vonder  Heide  is  president  of  Tech- 
nology Briefing  Centers,  Inc.  in  ^^ 
Oakbrook  Terrace,  Illinois. 
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Let  a  Hundred 
Search  Engines  Bloom 

Google's  deal  with  Yahoo  marks  a  flourishing 
of  specialized  Web  crawlers,  by  elinor  abreu 


WITH  ITS  SILLY  NAME 
and  its  spare,  most- 
ly white  homepage, 
Google.com  seems  like 
an  unlikely  harbinger  of 
change  on  the  Web.  But 
Google's  search  technology 
•  has  earned  it  eminence 
among  a  new  crop  of  high- 
end  search  engines.  And 
the  June  26  announcement 
that  Google  will  replace 
Inktomi  as  Yahoo's  con- 
sumer search  provider 
leads  a  surge  in  boutique 
search  technology  that's 
edging  onto  the  turf  of  the 
one-size-fits-all  engines. 

Yahoo  still  dominates  the 
list  of  popular  search 
engines  [see  chart,  page 
130].  But  the  market  has 
increasingly  opened  to 
newcomers  as  the  big  portals  -  most 
of  which  started  out  as  search  engines 
-  outsource  searching  functions. 
MSN.com  uses  LookSmart  and  Ink- 
tomi, America  Online  uses  Inktomi, 
Lycos  uses  Fast  Search  &  Transfer,  and 
Netscape  uses  Google,  according  to 
SearchEngineWatch.com. 

At  the  same  time,  surfers  fed  up 
with  irrelevant  or  outdated  search 
results  are  turning  to  new  search 
engines  that  differentiate  themselves 
from  the  established  ones.  Some 
examples: 

•  TopClick  offers  private  searches 
without  cookies  and  unsolicited  ban- 
ner ads,  and  it  doesn't  sell  customer 
information. 


Brin:  Lighting  the  way. 


•  Why.com  ranks  search  results 
based  on  Web  site  ratings. 

•  GenieKnows.com  is  a  new 
metacrawler  that  grabs  results  from 
24  search  engines. 

•  Copernic  offers  downloadable 
search  software  in  multiple  languages. 

•  Pinpoint.com  lets  users  search 
Web  dol5u7nlmTs~written  in  wireless 
mark-up  language. 

•  DolphinSearch  is  a  corporate- 
search  product  based  on  technology 
modeled  after  pattern  recognition 
used  by  dolphins. 

Some  new  companies  also  offer 
alternatives  to  traditional  search 
engines  with  big  promises  that,  so  far, 
haven't  materialized.  For  example, 


i  •  : 

WebTop  (formerly  Dialog)  claims  to 
be  launching  an  "Internet  searching 
revolution"  with  its  WebCheck  desk- 
top search  tool,  which  lets  people 
highlight  sentences  or  paragraphs  in 
e-mail  messages,  Word  documents  or 
on  the  Web  to  find  relevant  informa- 
tion online.  Similar  capabilities  are 
available  with  Ajgxa.com  and  Auton- 
omy, which  promises  to  "render  tradi- 
tional search  engines  obsolete"  with 
its  Kenjin  technology.  [See 
column,  page  51.] 

With  this  stream  of 
alternative  search  engines 
surfers  can  now  tailor  their 
searches.  They  could  use 
Yahoo,  for  instance,  for 
general  searches,  and 
Why.com  to  see  which  sites 
other  surfers  have  found 
useful. 

For  Google,  the  Yahoo 
announcement  is  a  major 
profile  boost.  "This  Yahoo 
deal  is  a  significant  con- 
tribution to  revenues,"  says 
Google  President  Sergey 
Brin.  "And  more  impor- 
tant, a  validation-of  our 
technology." 

Google's  privately  held 
status  may  have  provided 
leverage  to  offer  Yahoo  a 
better  deal  than  the  more- 
established,  publicly  traded  Inktomi, 
analysts  speculate.  "It's  hard  to  pursue 
Yahoo,"  says  Richard  Pierce,  COO  of 
Inktomi.  "But  we're  a  scrappy  bunch. 
We're  going  to  look  for  an  opportuni- 
ty to  win  them  back." 

Google  resembles  Yahoo  in  its  early 
days.  Like  Yahoo,  Google  was  founded 
by  two  Stanford  University  students  - 
Brin,  now  26,  and  CEO  Larry  Page, 
27  -  who  left  school  to  start  the  busi- 
ness. Since  its  founding,  searches  on 
the  Mountain  View,  Calif.-based 
company  site  have  increased  20  per- 
cent a  month,  Brin  says. 

The  company  has  staked  its  future 
on  assembling  the  largest  database  of 

CONTINUED  ON  PAGE  130 
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searchable  Web  pages.  Late  last 
month  Google  announced  that  its 
searches  encompass  more  Web  pages 
than  any  other  search  engine  -  aver- 
aging more  than  1  billion.  That 
includes  560  million  full-text 
indexed  pages  and  500  million 
partially  indexed  pages.  By  con- 
trast, Inktomi's  database  in- 
cludes 500  million  pages,  double 
those  of  AltaVista  and  Excite. 
And  several  magazines  have 
awarded  "best  search  engine"  to 
Google's  technology. 

"Overall,  Google  is  doing  very 
well,"  says  Steve  Lawrence,  re- 
search scientist  at  NEC  Research 
Institute  in  Princeton,  N.J. 
"They're  indexing  more  of  the 
Web  than  anybody  else,"  he  adds, 
"and  they  rank  highest  on  the 
independent  surveys,"  including 
the  consumer  survey  conducted 
earlier  this  year  by  research  firm 
NPD  New  Media  Services.  .'     . 

"Google  has  defined  them- 
selves to  be  one  of  the  leading 
search  companies  out  there,"  says 
Phu  Hoang,  VP  of  engineering 
for  Yahoo's  e-commerce  division. 
"They've  won  numerous  awards. 
We've  had  users  asking  us  about  them 
and  we  looked  into  it  and  they  really 
have  a  good  search  relevance." 

Relevance  is  the  operative  term. 
In  addition  to  prowling  directories 
assembled  by  humans,  most  searches 
hunt  for  Web  keywords  without 
checking  whether  they're  relevant 
to  the  search.  In  an  attempt  to  mea- 
sure relevancy,  Google  analyzes  sites 
that  link  to  pages  containing  the 
keywords  and  examines  how  promi- 
nent the  keywords  are"  on  the  pages. 
(For  example,  a  search  on  Google 
for  "Olympic  fencing"  produced 
links  to  the  Georgian  Olympic  team's 
homepage,  AOL's  Total  Sports  Olym- 
pic preview  and  a  CBS  SportsLine 
history  of  fencing.  The  top  result 
for  the  same  search  on  Go.com's 
portal  was  a  page  from  Freedom.org, 


an  online  magazine  for  the  Church 
of  Scientology.) 

Google's  link  analysis  and  simple 
user  interface  have  been  emulated 
by  AltaVista  and  ExciteAtHome, 
among  others. 
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The  next  new  search  star  could 
already  be  on  the  horizon.  Direct  Hit 
superseded  Inktomi  as  HotBot's  main 
search  provider  in  1998.  Djrect  Hit 
technology,  which  ranks  sites  based 
on  how  many  clicks  they  receive, 
helps  power  search  results  on  Ask 
Jeeves,  iWon  and  Lycos,  according  to 
SearchEngineWatch. 

Fast  Search  Transfer,  an  Oslo,  Nor- 
way-based site,  could  become  the 
search-engine  flavor  of  next  month. 
The  company,  which  uses  "spidering" 
software  that  continually  patrols  the 
Web  for  new  and  updated  sites  along 
with  ultrafast  indexing  technology, 
has  partnered  with  Dell  Computer 
to  overtake  Google  with  the  world's 
biggest  search  database. 

Currently  encompassing  80  million 
Web  pages,  Fast  Search  expects  to 


grow  to  200  million  by  the  end  of  the 
summer.  In  June,  Lycos  stopped  do- 
ing its  own  crawling  and  started  using 
Fast  Search,  in  conjunction  with 
Direct  Hit  for  some  searches.  Fast 
Search  now  powers  about  20  sites, 
according  to  Danny  Sullivan, 
editor  of  SearchEngineWatch. 

Northern  Light,  another  high- 
end  search  provider,  offers  its 
patented  technology  to  gauge 
Web-page  relevance.  It  has  also 
teamed  with  Medialink  to  offer  a 
service  that  monitors  thousands 
of  news  outlets  including  news- 
papers, TV  networks,  Web  sites 
and  collect  documents  or  news 
spots  on  specific  topics. 

Northern  Light  "has  big  cov- 
erage of  the  Web,  but  they're  not 
on  the  [top  search  engines] 
chart  because  they're  not  heavily 
used,"  says  Sullivan.  "They  ap- 
peal to  professional  researchers. 
It  may  be  that  they're  going  to 
succeed  as  a  tool  for  serious 
searchers." 

The  wave  of  the  future  could 
lie  with  sites  such  as  Buzz- 
notes.com,  which  customizes 
search  results.  Search  sites  may 
follow  the  lead  of  the  big  portals 
and  personalize  searches  to  increase 
sUrfer  loyalty. 

Niche  sites  that  search  within  a 
narrow  universe  of  the  Web  -  such 
as  Baber.com,  which  is  dedicated  to 
computer  products  and  services, 
andJindLaw.com,  which  deals  with 
legal  questions  -  are  likely  to  become 
more  popular. 

The  question  is  whether  all  the 
search  boutiques  can  generate  enough 
revenue  to  survive.  In  the  meantime, 
frustrated  Internet  seekers  will  contin- 
ue to  enjoy  a  panoply  of  spiders,  rele- 
vance rankers  and  database  detectives. 

"Two  years  from  now,"  says  Sulli- 
van, "we  may  have  someone  who  is 
a  new  Google  come  in  and  want  to 
make  a  name  for  itself."  ■■ 
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Momentum  for  online  privacy  regulation  is 

building-and  odds  are  good  that  the  government  will  step 

in 

By  Cheryl  Rosen  and  Beth  Bacheldor 


[privacy.  It's  an  American-as-apple-pie  issue. 
■When  it  comes  to  online  data,  Federal 
lawmakers  and  enforcers  now  want  to  claim  it  as 
their  own. 

The  Federal  Trade  Commission  last  week  filed 
suit  against  Toysmart.com  Inc.,  the  failed  online 
retailer  of  children's  toys,  to  block  the  company 
from  selling  its  customer  data  as  part  of  its 
assets.  The  lawsuit  stems  from  the  fact  that 
Toysmart.com-whose  databases  include 
children's  names,  birth  dates,  and  toy  wish  lists- 
had  a  privacy  policy  that  promised  "personal 
information  voluntarily  submitted  by  visitors  to 
our  site,  such  as  name,  address,  billing 
information,  and  shopping  preferences,  is  never 
shared  with  a  third  party."  The  FTC  thinks 
Toysmart.com  should  live  up  to  its  promise. 
"Even  failing  dot-coms  must  abide  by  their 
promise  to  protect  the  privacy  rights  of  their 
customers,"  FTC  chairman  Robert  Pitofsky  said  in 
a  statement  on  the  case.  "The  FTC  seeks  to 
ensure  these  promises  are  kept." 

The  FTC's  action  comes  at  a  time  when 
consumers  are  beginning  to  worry  that  online 
privacy  policies-to  paraphrase  Sam  Goldwyn's 
famous  line  about  verbal  contracts—aren't  worth 
the  paper  they're  printed  on.  In  an  election  year, 
as  politicians  sense  there  are  votes  to  be  gained 
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by  promising  to  protect  intimate  details  from 
online  marketers,  that  may  translate  into  federal 
action.  It  may  help  explain  why  there  are  300 
Internet  privacy  bills  floating  around  Congress, 
with  more  expected.  Also,  a  string  of  hacker 
attacks  and  database  glitches  has  raised 
awareness  of  just  how  vulnerable  the  Internet  is. 
Suddenly,  the  odds  seem  good  that  politicians- 
both  here  and  overseas-will  impose  privacy 
controls  on  the  Internet  industry  rather  than  let 
the  industry  regulate  itself. 
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July  has  been  a  bad  month  for  those  who  argue  for  industry  self- 
regulation.  Along  with  Toysmart.com,  two  other  failing  Internet 
companies-Boo.com  and  CraftShop. corn-were  discovered  trying  to  sell 
private  customer  information  such  as  phone  and  credit-card  numbers, 
home  addresses,  and  even  data  on  shopping  habits.  That  news 
prompted  Rep.  Spencer  Bachus,  R-Ala.,  to  say  he'll  introduce  legislation 
that  would  make  it  illegal  to  sell  such  data  to  third  parties  during  a 
bankruptcy.  At  the  same  time,  an  ongoing  class-action  lawsuit  against 
DoubleClick  Inc.,  aimed  at  forcing  the  online  advertising  company  to 
stop  using  Web  bugs~a  widely  used  and  nearly  invisible  way  to  track 
Web  surfers-and  to  let  people  see  and  correct  the  information  about 
them,  kept  the  privacy  issue  in  the  forefront.  Even  America  Online  came 
under  fire;  the  online  service  is  the  target  of  a  class-action  suit  that 
accuses  its  Netscape  subsidiary  of  using  a  software  program  to  secretly 
track  downloads  of  .exe  and  .zip  files.  "Netscape  is  using 
SmartDownload  to  eavesdrop,"  the  complaint  says. 

All  these  instances  are  more  evidence  that  in  the  United  States,  when  it 
comes  to  collecting  and  using  customer  data,  the  rule  has  mostly  been: 
Anything  goes.  For  instance,  motor  vehicle  departments  in  some  states 
sell  drivers'  personal  data  and  pictures  to  businesses.  "The  default  rule 
in  the  United  States  is  that  when  people  collect  data,  except  in  certain 
narrow  categories,  they  can  use  it  any  way  they  want,"  says  Maureen 
Dorney,  a  partner  specializing  in  intellectual  property  and  technology  at 
the  Palo  Alto,  Calif.,  law  firm  Gray  Cary  Ware  &  Freidenrich. 


Online  Privacy 

Aie  your  privacy  policies 
posted  online? 

62%  YM        Random  sample 


The  Internet  has  upped  the  ante.  The  flow  of 
data  over  the  Web  has  made  collecting 
customer  information  easier  and  cheaper,  and 
businesses  are  getting  more  aggressive  about 
gathering  data  as  market  competition  gets 
stiffer  and  profit  margins  shrink.  Companies 
analyze  clickstreams  to  measure  every  move 
a  customer  makes,  matching  that  information 
with  sales  data  and  demographics  and 
ultimately  pooling  terabytes  of  information 
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programs,  content,  and  sales  pitches.  They 
share  the  data  with  partners;  some  companies  even  make  money  by 
selling  off  chunks  to  others. 

Such  activities  have  turned  online  privacy  into  an  explosive  issue,  one 
that  many  companies  may  be  underestimating.  "There  are  a  lot  of 
heads  in  the  sand,"  says  Gary  Clayton,  founder  and  CEO  of  the  Privacy 
Council,  a  Dallas  company  created  to  help  businesses  improve  privacy 
practices.  "Data  flows  through  a  company  like  water  flows  through 
pipes.  I  don't  think  businesses  have  really  thought  about  how  they 
manage  this  data,  how  it  flows  throughout  the  company.  They  haven't 
answered  the  questions:  How  do  you  get  it,  how  do  you  use  it,  and  who 
has  rights  to  it?" 

For  the  FTC,  the  suit  against  Toysmart.com  demonstrates  not  the 
power  of  the  people,  but  the  problems  with  online  privacy.  "The  FTC 
has  the  ability  to  take  action  in  this  case  because  Toysmart.com  had  a 
privacy  policy  and  violated  it,"  says  an  FTC  spokesman.  "But  most 
companies  don't  have  a  policy  at  all,  and  they're  free  to  do  as  they  see 
fit  with  personal  data.  Our  ability  to  protect  the  public  is  not  sufficient 
to  deal  with  the  scope  of  the  problem." 

Other  areas  of  the  world  that  are  more  strict  about  the  use  of  customer 
data  are  well  aware  of  those  limitations.  Earlier  this  month,  the 
European  Parliament  voted  down  the  so-called  "Safe  Harbor 
Agreement,"  which  would  have  allowed  the  export  of  electronic  data  on 
European  citizens  to  the  United  States.  The  European  Union's  1  998 
Data  Protection  Directive  requires  that  European  consumers  be  allowed 
to  access  and  correct  their  data  and  specifically  agree  to  sharing  it  with 
others.  It  also  forbids  the  transfer  of  data  on  European  citizens  to 
countries  that  don't  meet  these  standards.  The  Safe  Harbor  Agreement, 
announced  May  30  after  two  years  of  negotiations  with  the  U.S. 
Department  of  Commerce,  says  U.S.  companies  that  agree  to  comply 
with  voluntary  guidelines  would  gain  "safe  harbor"  from  prosecution  for 
importing  data  on  European  consumers.  The  agreement  calls  on  the 
Commerce  Department  to  keep  a  list  of  safe  harbor-eligible  companies, 
the  FTC  to  review  complaints,  and  the  Department  of  Transportation 
and  the  FTC  to  police  E-commerce  Web  sites  and  brick-and-mortar 
companies  for  violations. 

The  compromise  agreement  was  expected  to  pass  the  European 
Parliament  with  little  opposition  until  the  Committee  on  Citizens' 
Freedoms  and  Rights,  Justice,  and  Home  Affairs  issued  a  report  in  June 
questioning  the  FTC's  enforcement  abilities  as  "purely  discretionary  and 
in  practice  exercised  only  occasionally."  Instead,  the  report  called  for  an 
independent  enforcement  body  like  the  one  in  the  EU  and  asked  that  a 
provision  be  included  to  provide  financial  compensation  to  European 
citizens  whose  rights  were  violated. 
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The  Internet  privacy  debate  isn't  new,  but  this  year  has  seen  some 
dramatic  developments.  In  February,  Doubleclick  faced  an  organized 
protest  from  the  Center  for  Democracy  and  Technology,  which  said  the 
online  marketing  giant  was  using  its  relationships  with  other  Internet 
companies  to  track  the  online  activities  of  individuals  and  then  tie  them 
to  those  individuals'  offline  activities.  That  led  to  an  FTC  inquiry  of 
Doubleclick's  practices.  At  the  same  time,  Doubleclick  admitted  it  was 
a  defendant  in  several  class-action  lawsuits.  Also  in  February, 
Amazon.com  Inc.  disclosed  that  it  and  its  Alexa  Internet  software 
subsidiary  were  facing  two  privacy-invasion  lawsuits  and  an  FTC 
inquiry> 
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What  Bessons  are  the  most  active  onhne 
advertisers  Seaming  about  how  to  use  the 
Internet?  We  took  the  top  20,  ranked  by 
AdReievence  according  to  banner  ad 
impressions,  and  talked  to  each  about 
what  they're  up  to  and  why.  Read  what  they 
have  to  say  on  pages  111  through  28.  But 
first  David  Butcher  sizes  up  the  trends 


Companies  that  advertise  on  the  internet  are  taking  a  risk. 
Online  advertising  is  still  young,  and  whatever  the  whiz  kids 
pitch  you  about  its  unique  targeting  opportunities  and  the 
wonders  of  optimizing  on  the  fly,  it's  still  a  long  way  from 
being  a  precise  science.  Veterans  of  web  marketing  are  the 
first  to  admit  that  there's  a  real  shortage  of  agency  people 
with  the  ability  to  talk  a  client  through  the  different  options 
in  plain  language,  explain  what  mix  of  media  makes  sense 
for  a  given  set  of  goals,  discuss  the  relative  pros  and  cons 
of  banners,  buttons,  sponsorships,  keyword  buys, 
interstitials,  rich  media  ads  and  email,  and  demonstrate 
how  all  of  those  dovetail  with  an  offline  marketing  plan. 

Revolution  decided  to  track  down  the  web's  most  prolific 
advertisers  and  see  what  they  had  to  say  about  their 
successes  and  failures.  Some  were  more  candid  than 
others,  but  their  comments  make  for  a  useful  snapshot  of 
the  state  of  play  in  mid-2000. 

Our  ranking  of  the  top  spenders  is  done  by  banner  ad 
impressions.  Clearly,  they  are  just  one  part  of  the  online 
media  story,  but  a  big  part  nonetheless:  over  half  of  all  ad 
dollars  spent  on  the  internet  are  spent  on  banners.  "There's 
nothing  wrong  with  a  good  banner  that  has  a  strong  value 
proposition  addressed  to  the  right  target  audience,"  says 
Todd  Watson,  digital  brand  manager  at  IBM,  a  company 
often  singled  out  for  its  intelligent  use  of  online  advertising. 

Of  course,  banner  ads  still  have  their  critics.  "There 
definitely  is  frustration  in  the  industry  about  the  banner 
as  a  piece  of  real  estate,"  observes  Jupiter 
Communication's  Michelle  Slack.  "Although  it's  still  the 
backbone  of  most  media  buys,  there's  great  interest  in  what 
else  is  out  there,  in  what  else  companies  can  be  doing." 

Hence  the  deals  we've  seen  recently  between  offline 
giants  like  Pepsi  or  Coke  and  online  empires  like  Yahoo! 
and  AOL.  Says  Slack,  "For  the  traditional  advertisers, 
they're  more  interested  in  driving  a  deeper  relationship  with 
consumers  and  in  branding.  They're  a  a  lot  more  interested 
in  these  more  complex  deals."  On  page  32,  John  Gaffney 
looks  at  one  creative  solution  for  companies  seeking  richer 
branding  opportunities:  the  web  site  "takeover." 

If  portals  and  media  owners  are  bending  over  backward  to 


accommodate  big  offline  corporations,  that's  partly  because 
the  likes  of  Kraft,  Miller  and  Ford  are  a  feather  in  your  cap.  As 
Slack  explains,  "You  hear  a  lot  from  the  portals  these  days 
about  the  number  of  deals  with  traditional  advertisers  versus 
dot-coms,  because  the  perception  is  that  a  lot  of  the 
dot-coms  are  going  to  go  out  of  business,  so  you  don't  want 
too  much  of  your  advertising  tied  to  them.  I  think  that's  why 
there  may  be  a  little  bit  more  flexibility  around  the  traditional 
companies  allowing  them  to  do  more  integrated  buys." 

And  integration  is  the  word  on  everyone's  lips.  For 
publishers  it  means  setting  up  cross-media  divisions  to  sell 
space  across  online  and  offline  properties.  For  advertisers 
and  their  agencies  it  means  taking  advantage  of  those 
synergies  by  getting  the  young  turks  in  the  online  division  to 
bang  their  heads  together  with  the  traditional  guys  or  the 
direct  marketing  guys  to  assemble  marketing  plans  that  span 
all  media.  As  Rishad  Tobaccowala  of  online  media  agency 
Starcom  IP  puts  it:  "The  ultimate,  which  is  what  clients  want, 
is  to  use  a  little  online,  a  little  radio  and  a  little  TV.  How  can  I 
combine  them  so  that  1+1+1=4?  Give  me  ideas  where  I  use 
the  web  as  a  component  but  not  the  only  thing." 

But  banners  are  likely  to  remain  a  part  of  those  plans  for 
some  time  to  come.  And  in  buying  them,  the  trend  in  the 
past  year  has  been  toward  performance-based  buys  based 
on  more  than  CPM  (cost  per  thousand  impressions).  Hybrid 
buys  that  have  an  element  of  cost-per-click  or  cost-per- 


.          Impressions 

Spending 

Unique 

Advertiser           -(Millions) 

(Millions) 

creatines 

1 

WingspanBank 

1,800 

$38 

200 

2 

_  Lowestfare 

1,500 

$28 

150 

3 

LifeMinders 

'   1,500 

$42 

1,200 

4 

Amazon 

1,400 

$34 

570 

5 

oneandonly 

1,200 

$27 

140 

6 

AmeriDebt 

1,100 

$26 

230 

7 

HealthQuick 

1,100 

$23 

100 

8 

NextCard 

1,000 

$32 

340 

9 

Capital  One 

1,000 

$23 

290 

10 

eBay 

930 

$28 

360 

11 

Fidelity  Investments 

890 

$20 

220 

12 

PETsMART 

860 

$11 

250 

13 

Net2Phone 

850 

$29 

92 

14 

The  Sports  Authority 

840 

$19 

120 

15 

GetSmart 

810 

$19 

170 

16 

ClassMates 

750 

$23 

80 

17 

Corbis 

740 

$15 

130 

18 

HealthAxis.com 

720 

$14 

190 

19 

WebMD 

720 

$15 

180 

20 

MSN 

590 

$10 

820 

Definitions 

Impression:  The  number  of 
times  an  ad  is  rendered  for 
viewing.  A  calculation  of 
traffic  multiplied  by  rotation. 
Spending:  The  estimated 
cost  of  placing  ads.  A 
calculation  of 
impression  multiplied  by 
standard  rate  card  CPM. 
Creative :  Unique  execution 
of  an  ad:  includes  banners 
and  buttons,  but  does 
not  include  text  ads 
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conversion  have  the  advantage  of  sharing  the  risk  between 
advertiser  and  media  owner,  and  in  the  latest  survey  of  the 
Association  of  National  Advertisers,  62  percent  of 
advertisers  said  they  bought  on  the  basis  of  a  hybrid  model. 
Last  year  this  kind  of  buy  didn't  even  register  in  the  survey. 

But  if  that  suggests  that  CPMs  are  on  the  way  out  and  in 
the  future  media  owners  will  be  paid  only  when  users  click 
through  and  become  customers,  consider  an  interesting 
statistic  from  AdKnowledge.  Its  Ql  2000  report  broke 
down  purchases  completed  by  users  who  had  been 
exposed  to  an  ad  campaign.  Across  multiple  campaigns 
over  six  months,  it  discovered  that  more  conversion  events 
came  from  users  who  viewed  an  ad  but  did  not  click  it, 
than  from  people  who  actually  clicked  through.  In  fact, 
32  percent  of  post-impression  conversions  came  from 
users  who  didn't  bother  to  click  through  but  still  made 
a  later  purchase.  As  AdKnowledge  points  out,  this 
means  that  advertisers  who  base  their  decisions 
only  on  clicks  or  post-click  conversions  may  miss 
important  effects  of  their  campaign. 

Nonetheless,  average  click-through  rates  of  around  0.4 
percent  (according  to  NetRatings)  are  hardly  inspiring, 
especially  when  you  compare  them  to  response  rates  for 
email  marketing.  Currently,  email  campaigns  -  whether 
they  involve  an  ad  placed  in  a  media  owner's  newsletter,  a 
promotional  message  sent  to  names  on  a  purchased  opt-in 
list,  or  a  retention  email  for  existing  customers  -  are  the 
highfliers  of  online  marketing. 

But  email  is  like  a  beautiful  travel  destination  that  gets 
ruined  when  everyone  discovers  it.  Last  year,  on  average, 
each  email  user  received  40  marketing  messages. 
Jupiter  predicts  that  by  2002  we'll  each  be  getting  that 
many  per  month,  and  that  by  2005  we  could  be  getting 
over  30  every  week.  With  that  level  of  clutter,  "in-box 
fatigue"  will  set  in  and  response  rates  will  decline.  In  the 
meantime,  marketers  are  making  hay  while  the  sun  shines, 
spending  $164  million  on  email  in  1999,  and  a  predicted 
$600  million  this  year,  rising  to  $1.3  billion  in  2001. 

Meanwhile,  IBM's  Watson  believes  that  in  all  this, 
privacy  concerns  should  be  at  the  top  of  every  e-marketer's 
mind.  After  all,  this  was  a  year  when  Doubleclick  nearly 
brought  the  whole  industry  into  disrepute  by  linking 
anonymous  profiles  to  real-world  names  and  addresses  - 
an  attractive  idea  from  the  direct  marketer's  perspective, 
but  a  smoking  gun  for  the  privacy  police. 

Watson's  advice?  "We  think  it's  going  to  be  absolutely 
critical  that  web  marketers  and  advertisers  take  into 
serious  consideration  the  privacy  practices  of  all  the  media 
properties  on  which  they  advertise  and  any  of  the  vendors 
with  whom  they're  working,"  he  says.  "If  you're  gathering 
any  kind  of  personally  identifiable  information,  ultimately 
you  are  responsible  for  how  that  information  is  handled." 

And  remember,  data  can  be  useful,  but  it  won't 
hold  all  the  answers.  "This  is  data-assisted, 
not  data-driven,"  saysTobaccowala.  "It's  a  case  of 'Data, 
data  everywhere,  but  who  will  help  me  think?'  Sooner  or 
later  you  have  to  take  leaps  of  marketing  faith."  □ 
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How  the  rankings  are  calculated 


This  ranking  of  the  most  active  online 
advertisers  covers  the  period  November 
1999  through  April  2000,  and  was 
produced  for  Revolution  by  AdRelevance, 
a  division  of  Media  Metrix.  The  ranking  is 
based  on  banner  impressions,  i.e.,  the 
number  of  times  a  particular  ad  is 
rendered  for  viewing  by  a  user. 

AdRelevance  uses  software  "probes"  to 
scan  a  set  of  500  major  sites  and  the  3,500 
pages  connected  to  them,  which  report  back 
on  how  frequently  a  given  banner  is  served. 
Once  that  is  multiplied  by  the  traffic  at  sites 
where  the  ad  was  shown,  AdRelevance 


arrives  at  a  figure  for  total  impressions. 

Expenditure  figures  are  calculated 
on  the  basis  of  rate-card  CPMs  (costs  per 
thousand  impressions).  Since  few  ads 
are  bought  at  that  rate,  figures  shown 
here  represent  a  measure  of  the  value 
advertisers  are  receiving  rather  than 
the  money  they  have  actually  spent. 

Interestingly,  the  top  50  advertisers  listed 
here  represent  over  50  percent  of  all  the 
ad  impressions  served  online. 
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Enabling  Technologies 


Paul  Maglio  and  Rob  Barrett 


T  Intermediaries  Personalize 

.-.Information 

Streams 

A  software-based  middleman  transforms  data  between  client  and 
server  for  faster  delivery  and  discovery. 

Intermediaries  are  software  programs  or  agents  that  meaningfully  transform  infor- 
mation as  it  flows  from  one  computer  to  another.  Just  as  brick-and-mortar  retail- 
ers buy  products  from  wholesalers  and  add  value  by  providing  them  to  consumers 
in  attractive  ways,  intermediaries  located  in  the  information  stream  between  producer 
and  consumer  can  personalize  raw  information  for  individuals,  devices,  and  situations. 


In  fact,  many  contemporary  Web  services  are  inter- 
mediaries, performing  such  functions  as  transform- 
ing news  feeds  and  airline  reservation  databases 
into  categorized  and  personalized  Web  pages. 
Because  Web  information  can  be  easily  customized, 
intermediaries  can  easily  tune  it  for  many  different 
uses  and  reuse  it  for  many  different  situations. 
Likewise,  because  information  providers  can  no 
longer  anticipate  all  possible  uses  of  their  informa- 
tion, third-party  intermediary  services  will  play  an 
increasingly  significant  role  in  adapting  and  per- 
sonalizing information  on  the  Web. 


Consider  how  news  is  commonly  delivered  on  the 
Web  today:  First,  a  news  service  (such  as  the  Associ- 
ated Press  or  Reuters)  creates  a  story  along  with  its 
headline  and^ategoryTThen,  a  news  portal  (such  as 
Yahoo!  News  or  Excite  News)  acts  as  an  intermediary 
by  deciding  how  to  present  the  stories  to  the  user  (for 
example,  Yahoo!  News  puts  three  top  headlines  on 
its  first  page,  and  produces  separate  pages  for  each 
category,  such  as  business,  technology,  health).  The 
same  raw  information  may  be  processed  by  multiple 
intermediaries  to  present  it  in  different  ways.  One 
intermediary  may  produce  a  page  for  each  complete 
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story  along  with  links  to  associated  information,  such 
as  stock  prices  and  movie  times.  Another  may  add 
value  to  the  information  presentation  by  displaying 
headlines  on  a  scrolling  ticker  or  sending  users  news 
stories  by  email. 

Many  current  Web  services  are  based  on  interme- 
diary processing  models,  but  few  would  describe 
them  this  way.  We  believe  intermediaries  are  a  pow- 
erful new  way  to  transform  information  flowing 
between  computers.  One  result  of  describing  Web 
services  as  intermediary  services  is  that  more  produc- 
tive methods  for  building  and  deploying  intermedi- 
ary applications  can  be  developed  as  transformations 
are  separated  from  the  data  they  operate  on  and  can 
be  dynamically  composed  in  novel  ways.  Intermedi- 
aries can  transform  information  at  the  server,  at  the 
client,  or  anywhere  in  between  (see  Figure  1).  Web 
Intermediaries  (WBI)  is  an  implemented  framework 
for  adding  intermediary  functions  to  the  Web  [1-3]. 


By  providing  a  programming  model  for  intermedi- 
aries, WBI  enables  the  quick  development  and 
deployment  of  systems  that  add  value  by  transform- 
ing information  that  flows  between  Web  server  and 
Web  client. 

Intermediaries  are  Everywhere 

Beyond  our  news  service  example,  intermediaries 
are  pervasive  across  the  Web.  Consider  travel 
resources  such  as  Jravelocity  and  Expedia.  These 
consolidate  services  and  information  from  a  variety 
of  sources,  providing  consumers  of  travel  services  a 
central  point  for  browsing  and  reserving  airline  tick- 
ets and  hotel  rooms.  They  also  tailor  travel  informa- 
tion to  individuals  based  on  user  profiles  and  history 
of  use.  As  intermediaries,  these  sites  function  much 
like  human  travel  agents,  scouring  several  sources  of 
information,  taking  account  of  customer  prefer- 
ences and  desires,  applying  rules  and  heuristics  to 
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takes  into  account  when  data  was  last  stored  or  last 
changed  so  that  data  might  be  retrieved  from  a  local 
repository.  These  high-level  intermediary  functions 
can  be  implemented  by  combining  just  three  lower- 
level  operations:  data  generation,  data  editing,  and 
data  monitoring  {see  Figure  2). 

Generation  produces  the  source  form  of  the  infor- 
mation and  passes  it  along  to  the  intermediary  for 
processing.  Generation  may  retrieve  the  raw  informa- 
tion from  a  Web  server  or  local  cache,  or  it  may  com- 
pute it  dynamically.  Conventional  Web  servers,  along 
with  their  programming  interfaces  (for  example, 
Common  Gateway  Interface  (CGI)  scripts  and  Java 
Servlets)  are  examples  of  data  generation.  Clearly,  any 
function  can  be  built  as  a  single,  complex  data  gener- 
ator. But  intermediary-based  systems  are  more  flexible 
and  modular  because  they  separate  information  gen- 
eration from  subsequent  transformations. 

After  it  has  been  generated,  an  intermediary  may 
edit  the  raw  data.  It  may  be  transcoded  into  a  form 
compatible  with  the  user's  viewing  device,  for  exam- 
ple, the  Palm  Pilot  or  Wireless  Application  Protocol 
(WAP)  phone.  Or  as  another  example,  it  may  per- 
sonalize the  information  for  the  particular  user.  Simi- 


larly, as  more  data  is  structured  in  eXtensible  Markup 
Language  (XML),  intermediaries  will  edit  the  data 
with  eXtensible  Style  Sheets  (XSL)  to  transform  it 
appropriately  for  the  particular  situation. 

Data  monitoring  allows  the  intermediary  to  track 
information  as  it  passes  through,  either  in  raw  form  or 
after  processing.  Monitoring  is  commonly  used  for 
caching  Web  resources  for  faster  delivery,  logging 
usage  patterns,  billing  for  the  use  of  raw  information, 
and  building  user  models  for  Web  browsing  activities. 

Figure  3  illustrates  the  way  an  intermediary  appli- 
cation can  be  built  from  these  three  basic  compo- 
nents. In  this  case,  Web  pages  are  edited  to  add  links 
to  people's  names  from  a  corporate  directory.  When 
one  of  these  links  is  clicked,  the  intermediary  gener- 
ates a  page  with  that  person's  directory  information. 
Monitoring  is  used  to  keep  a  record  of  the  people  this 
user  has  read  about  on  the  Web. 

WBI  Functions 

As  mentioned,  WBI  (pronounced,  WEB-ee)  is  a 
development  kit  and  server  software  for  adding 
intermediary  functions  to  the  Web.  More  precisely, 
WBI  is  a  programmable  hypertext  transfer  protocol 
(HTTP)  proxy  server  designed  for  easy  development 
and  deployment  of  intermediary  applications  [1,2]. 

With  WBI,  intermediary  applications  or  plugins 
are  constructed  from  the  three  basic  operations:  mon- 
itors, editors,  and  generators  (known  collectively  as 
MEGs).  Plugins  are  made  up  of  multiple  MEGs  that 
work  together.  Multiple  plugins  can  be  installed  in 
WBI  to  combine  applications,  such  as  transcoding 
and  caching.  WBI  then  dynamically  routes  Web 
transactions  through  the  MEGs  by  matching  the 
information  about  the  HTTP  transactions  against 
Boolean  rules  associated  with  the  MEGs.  For  exam- 
ple, a  monitor  might  be  configured  to  track  only 
information  of  type  "text/html"  that  comes  from  the 
"yahoo.com"  domain. 

Plugins  are  defined  by  their  MEGs  and  the  rules 
that  control  when  the  MEGs  are  involved  in  a  trans- 
action. For  instance,  a  caching  proxy  is  easy  to  imple- 
ment as  a  WBI  plugin  that  monitors  HTTP 
transactions  to  store  documents,  and  generates  docu- 
ments from  the  local  store  when  they  are  available  (see 
Figure  4).  Document  transcoding  is  also  straightfor- 
ward to  implement  as  a  WBI  plugin.1  Recall  that 
transcoding  is  the  process  of  converting  a  document 
formatted  one  way  into  a  document  formatted  a  dif- 
ferent way.  For  example,  it  might  be  convenient  to 
convert  HTML  documents  to  WML  or  convert 
images  containing  millions  of  colors  to  images  contain- 

'in  feet,  IBM's  Websphere  Transcoding  Publisher  product  is  based  on  WBI. 
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ing  four  bits  of  grayscale  so  that  wireless  phones  can  dis- 
play them.  To  convert  HTML  to  WML,  an  editor 
would  trigger  on  a  rule  that  matches  either  the  content- 
type  of  the  response  ("text/html")  or  the  file  extension 
of  the  URL  ("*.html").  This  editor  can  then  use  what- 
ever software  is  necessary  to  effect  the  conversion  from 
HTML  to  WML.  WBI  handles  all  the  plumbing, 


time  in  the  past  containing  the  given  keywords.  Path 
browsing  allows  a  user  to  view  paths  taken  through  a 
particular  page.  If  the  user  knows  only  that  some  rel- 
evant page  was  seen  shortly  after  going  through  the 
IBM  home  page,  then  by  browsing  only  the  paths 
taken  through  the  IBM  home  page,  he  or  she  is  likely 
to  quickly  find  the  sought-after  page. 


Figure  4.  Caching  can  be  easily  implemented 

as  a  WBI  plugin.  A  request  for  a  document 

is  generated  by  a  Web  browser  and  flows  eithei 

to  a  generator  that  retrieves  it  from  the  cache 

or  retrieves  it  from  the  Web.  If  the  generator 

retrieves  the  document  from  the  Web, 

transformations,  such  as  transcoding  from 

one  document  type  to  another,  may  then  be 

done  by  an  editor.  On  its  way  back  to  the 

browser,  the  response  is  monitored  and 

Dossiblv  stored  in  the  cache. 


Request 


Retrieve  from  Web 


Document  Cache 


0 

^-1 


Response 


Figure  5.  The  WBI  Traffic  Lights  plugin 
annotates  links  with  colored  dots  that  indicate 
the  network  delay  for  reaching  the  linked  page. 
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allowing  the  application  writer  to  concentrate  on  appli- 
cation details  rather  than  on  HTTP  (see  also  [5]). 

Obviously,  the  plugins  for  transcoding  and  caching 
can  be  chained  one  after  the  other  so  that  transcoded 
documents  are  automatically  cached,  eliminating 
expensive  format  conversions  already  completed  (see 
Figure  4). 

We  have  developed  many  WBI  plugins  that  per- 
sonalize and  customize  information  for  individual 
users  or  groups  of  users  [3].  For  instance,  the  Personal 
History  plugin  uses  a  monitor  to  record  the  sequence 
of  pages  visited  by  a  user  along  with  the  content  of 
each  page.  The  user's  personal  history  is  accessible 
through  keyword  queries  or  path  browsing.  Keyword 
queries  retrieve  a  list  of  pages  the  user  viewed  some- 
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Using  the  contents  of  pages  monitored  and  stored 
by  the  Personal  History  plugin,  WBI  can  customize 
Web  pages  by  adding  links  to  pages  frequently  visited 
by  a  certain  user.  Because  Web  users  rely  on  routines 
and  standard  behaviors  to  access  information  [3,  7], 
WBI's  Short  Cuts  plugin  adds  links  to  pages  a  user 
routinely  visits.  This  plugin  uses  a  document  editor  to 
add  links  when  there  are  pages  in  the  database  that 
the  user  habitually  visits  within  some  radius  (say,  five 
clicks)  from  the  current  page. 

Another  way  WBI  can  tailor  Web  pages  is  by  adding 
extra  information  about  the  hyperlinks  on  a  page,  such 
as  the  speed  of  downloading  information  from  a  par- 
ticular site.  WBI's  Traffic  Lights  plugin  uses  a  docu- 
ment editor  to  add  green,  yellow,  and  red  dots  next  to 
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hyperlinks  to  inform  the  user  that  responses  from  the 
server  axe  fast,  slower,  or  slowest  (see  [3,  4],  Figure  5). 

Other  sorts  of  annotations  to  Web  pages  are  also 
possible.  For  instance,  the  Dictionary  plugin  turns 
ordinary  words  on  Web  pages  into  hyperlinks  that 
point  to  their  definitions  [6].  In  this  case,  a  document 
editor  analyzes  the  text  of  Web  pages  for  words  or 
phrases  whose  definitions  are  contained  in  some  Web- 
based  dictionary.  If  a  word  or  phrase  definition  is 
found,  it  is  transformed  from  ordinary  text  to  a  hyper- 
link that  points  to  the  definition.  In  this  way,  pages 
containing  highly  technical  medical  or  legal  informa- 
tion can  be  made  accessible  to  nonspecialists. 

As  sketched  in  the  example  shown  in  Figure  3, 
WBI's  Person  Directory  plugin  provides  another 
example  of  annotating  Web  pages  with  externally 
available  information  [6].  This  plugin  uses  a  docu- 
ment editor  to  find  names  contained  in  a  phone  or 
corporate  directory  (for  example,  using  a  Lightweight 
Directory  Access  Protocol — LDAP — server),  and 
insert  phone  numbers  or  other  personal  information 
into  the  document.  This  can  be  done  at  a  corporate 
firewall,  enabling  Web  pages  that  flow  through  the 
firewall  to  be  automatically  customized  with  corpo- 
rate directory  information. 

Conclusion 

Intermediaries  are  programs  that  operate  on  infor- 
mation flowing  between  its  producer  and  its  con- 
sumer. As  we  have  shown,  intermediaries  already 
play  a  fundamental  part  in  information  production 
and  transformation  on  the  Web  (for  example,  por- 
tals, proxies,  transcoders).  The  notion  of  intermedi- 
aries can  be  generalized  to  incorporate  processes  that 
produce  personalized  information  and  much  more. 
Intermediaries  can  be  analyzed  in  terms  of  MEGs 
and  in  terms  of  their  positioning  and  function.  This 
analysis  simplifies  the  design,  development,  and 
deployment  of  intermediary-based  processing.  WBI 
is  a  framework  for  developing  and  deploying  such 
intermediaries  on  the  Web.  We  believe  intermedi- 
aries provide  an  important  and  useful  new  model  for 
personalizing  Web-based  information.   B 
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POP3-www.faqs.org/rfcs/rfcl  939.html 
Reuters — www.reuters.com/news 
Travelocity — www.travelocity.com 
Wireless  Access  Protocol  (WAP)— 

www.wapforum.org 
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Saving  Bits 
and  Bytes 
for  History 

■  As  technology  reinvents 
itself  at  ever-faster  speeds, 
museums  and  collectors  are 
rescuing  superstar 
computers  abandoned  after 
their  moment  of  glory. 


■  On  a  muggy  autumn  morning  in 
1985,  computer  scientist  John  Lee 
and  a  small  hand  of  researcher? 
gathered  on  a  farm  in  Virginia  and 
began  grubbing  through  a  heap  of 
rusted  refrigerators,  stoves  and  an- 
cient radios  tossed  there  decades 
ago  by  a  scrap  dealer. 

Buried  somewhere  in  this  pile  of 
junk  lay  pieces  of  the  only  Harvard 
Mark  III  computer  ever  built— a 
house-sized  machine  festooned 
with  flashing  lights  and  whirring 
tape  reels  time  Time  magazine  put 
on  its  cover  in  1950  as  a  "thinking 
machine"  that  could  have  "more 
effect  on  mankind  than  atomic  en- 
ergy." 


Lee  and  his  comrades  uncovered 
their  first  piece  in  moments— an 
aluminum  arm  with  a  dime-sized 
slug  of  steel  that  was  used  to  read  a 
Mark  in  memory  device. 

"All  of  us  were  mentally  jumping 
for  joy,"  Lee  said,  recalling  the  ex- 
citement of  their  discovery. 

Their  joy,  however,  was  short- 
lived. After  a  year  in  which  they 
gathered  a  few  boxes  of  Mark  III 
pieces,  the  farm  was  sold  and  a 
house  was  built  on  top  of  the  junk 
pile. 

"Gone  ...  all  gone,"  said  Lee 
from  his  office  at  Virginia  Poly- 
technic Institute  and  State  Univer- 
sity as  he  gazed  at  the  aluminum 
arm  he  had  dug  up  years  ago. 
"Those  people  have  no  idea  what  is 
under  their  patio." 

For  technology,  time  has  proved 
to  be  a  cruel  master,  an  insatiable 
destroyer  of  what  is  arguably  the 
greatest  revolution  of  the  20th  cen- 
tury. Unlike  great  literature  and 
art,  which  grow  in  meaning  and  sig- 
nificance over  time,  old  technology 
has  simply  become  obsolete  stuff 
that  takes  up  space. 

Over  just  the  last  50  years,  some 
of  the  most  famous  pieces  of  com- 
puting history— devices  as  revolu- 
tionary in  their  time  as  Gutenberg's 
printing  press  or  James  Watt's 
steam  engine— have  been  heaped 
into  landfills  across  the  world. 

For  historians  they  are  painful 
losses,  since  many  of  the  pioneers 
of  this  revolution  are  still  alive  and 
their  creations  could  have  been 
easily  saved  if  someone  had  had 
the  foresight  to  see  their  signifi- 
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bnarNs  and  the  Deep  nine  program. 
Hut  trying  lo  decide  what  lo  do 
ahout  the  computer  itself  was  a 

more  difficult  issue. 

The  IBM  researchers  finally  per- 
suaded the  company  to  give  them 
the  computer  lo  use  on  their  next 
project,  developing  advanced  e- 
commerce  applications. 

"Maybe  we  are  being  too  senti- 
mental, but  this  is  the  machine  that 
won  the  match!"  Campbell  said. 

'I'm  Just 

One  Guy' 

Technology  is  developing  so 
quickly  that  many  of  the  most  im- 
portant artifacts  of  the  present  age 
have  tinned  out  to  be  devices  and 
programs  churned  out,  not  by  the 
dozens  or  the  hundreds,  but  by  the 
millions. 

Allison,  of  the  National  Museum 
ot  American  ilislury,  said  that  just 
trying  to  capture  a  minor  part  of 
the  outpouring  of  technology  that 
has  characterized  the  modem  era 
has  meant  collecting  such  dispa- 
rate devices  as  Apple  Computer's 
groundbreaking  Newton  personal 
digital  assistant,  a  see-through 
Palm  Pilot,  two  Apple  [Mac's, 
droves  of  networking  equipment 
from  Cisco  Systems,  an  early  auto- 
matic teller  machine  and  even  cop- 
ies of  such  popular  computer  pro- 
grams as  the  games  DOOM,  Quake, 
MystnndSimCily. 

For  GWQiy  collection  lie  stai  Is,  a 
new  group  of  categories  seems  to 
pop  up.  He  said  he  hasn't  even 
puter -by  literally  stopping  the    started  dealing  with  such  onini- 
truck  that  was  taking  the  machine    present  devices  as  MP3  players,  In- 
to the  landfill. ternet  cellular  phones  and  Ninten- 

BuTeven  ns  historians  lament     do  game  machines, 
the  loss  of  historic  devices  to  land-         "I'm  just  one  guy."  Allison  said, 
fills  and  technology  hunters,  they    "1  don't  even  have  a  PC  depart- 
are  facing  a  thorny  question:  In  an    ment.  It  can  be  a  little  overwhelm- 
large  pari  of  the  ENIAC  in  storage,    age  of  mass  production,  what  ex-    fog." 

had  to  sit  on  the  sidelines  in  the    actly  is  historic?  Except  for  a  project  that  col- 

Imi     likp  everything    Eckert  auction.  Most  of  the  early  computers,  in-    Ipriprl  the  loop.  n»>«iHAnti:ii  WnH 

ndiistry— was  soon         "We  just  couldn't  afford  it,"  said     eluding  ENIAC  and  the  Harvard     sites,  the  Smithsonian  has  done  lit- 
er models.  Nearby  is     David  Allison,  chairman  of  the  divi-     Mark  III,  were  unique,  and  almost     tie  to  collect  pieces  of  what  is  un-     '! 
k  of  the  19fi8  SAGE     sion  of  information  technology  and     everything  about  them  could  be     doubtedlv   the  most   significant      « 


w       i 


the  longing  for  things     electronic  computer,  and  many 


nvented,  "Spicersaid. 
r  said  he  understands  why 
'  historic  devices  have  been 
nil:  Most  people  probably 
■ven  know  that  many  of 


1969  computer. 

ful  rescues  over  the  decades.  Leon- 
ard Kleinrock,  a  professor  of  com- 
puter science  at  UCLA,  managed  Lo 
save  the  first  computer  attached  to 
ARPANET,  the  precursor  of  the 
Internet,  by  stashing  the  refrigera- 
tor-sized machine  in  the  depart- 


documents  from  one  of  its  design 
eis,  J.  Piesper  Eckerl,  were  sold  in 
an  auction  for  $80,000. 

ENIAC,  an  acronym  for  Elec- 
tronic Numerical  Integrator  and 
these  machines  existed  in  the  first  Computer,  began  life  as  a  secret 
place.  Army  project,  during  World  War  II     ment's  library  for  more  than  a  ilec- 

As  he  walked  through  the  chit-    to  create  a  machine  that  could  gen-    ade. 
teix'd  mess  of  machines  packed  into     erate  huge  tables  of  trajectories  for        Gordon  Bell,  a  renowned  Digital 
one  of  the  museum's  buildings,  he     artillery  shells.  Equipment  engineer  who  helped 

recited  the  histories  of  various  The  machine  has  always  occu-  design  the  first  minicomputers, 
piece-,  that  would  be  obscure  even  pied  a  special  place  in  the  hearts  of  saved  MIT's  1951  Whirlwind  coin- 
technologists  because  of  how  much 
its  designers  accomplished  using, 
not  silicon  chips  or  even  transis- 
tors, but  vacuum  tubes— thousands 
of  them. 

The  Smithsonian  Institution  in 
Washington,  D.C.,  which  has  a 


)  many  computer  pioneers. 
In  one  building  is  a  15-year-old 
ray-2,  a  sleek  tower  of  red-and- 
lack  metal  used  at  Lawrence 
ivcimore  National  Laboratory  for 
■se;nch  into  fusion  energy,  high- 
nergy  physics,  material  science 
nd  climate  modeling.  It  was  one  of 
10  mosl  powerful  supercomputers 
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slaekod  ahnesl  haphaz- 
metal  racks,  and  a  thick 

layer  of 

dust  covers  the  heaps  of 

iptiter,  built  by  IBM  as  part  of 
■arly-warning  system  for  the 
.  Air  Force,  and  a  Honeywell 
hen  Computer,  a  gimmick  de- 
1  for  tech-savvy  housewives 
was  sold  by  Nicman  Marcus  in 
I  for  $10,000  to  store  recipes. 
i  comparison  with  the  1,500- 
-ol.l  pyramids  of  Egypt  or  even 
relatively  youthful  Leaning 
er  of  Pisa",  at  just  800  years  old, 
•ems  incomprehensible  that  a 


bunch  of  programs  and  dusty 

chines  that  are  at  most  GO  or  70     baseballs  and 

years  old  should  be  worthy  of  cori-     nalia. 


iety  for  the  Smithsonian's  Na- 
tional Museum  of  American  His- 
tory. 

Profiting  From 
New  Memorabilia 

Souvenir  hunters  also  have  be- 
gun to  wake  up  to  the  profit  poten- 
tial in  selling  technology  memora- 
bilia in  much  the  same  way  that 
previous  generations  sold  signed 
star  parapher- 


The  Internet  and  the  prolifera- 
tion of  computing  devices  in  every 
nook  and  cranny  of  modern  life 
have  begun   to 
computers  a  hip 


One    enterprising     collector 
bought  a  rare  Cray-1  supercom- 
puter in   1993  lor  $10,000  (down 
from  its  original  $19-million  price 
in  1976)  from  Lawrence  Livermore. 
The  collector  has  been  selling 
ke  collecting     pieces  of  its  circuit  boards  for  $150. 
stime  lor  newly     He  has  since  bought  five  more  Cray    gone, 


considered  groundbreaking. 

But  by  the  1960s,  most  comput- 
ers were  mass-produced  and  the 
key  to  their  uniqueness  often  lay, 
not  in  their  hardware,  but  in  their 
software. 

Jonathan  Schaeffer,  a  professor 
of  computer  science  at  the  Univer- 
sity of  Alberta,  wrote  a  checkers 
program  called  Chinook  that  be- 
came world  champion  in  1994.  Chi- 
nook used  one  of  the  most  powerful 
computers  of  its  time,  a  sixteen- 
processor  Silicon  Graphics  Chal- 
lenge computer. 

Silicon  Graphics  lent  the  ma- 
chine lo  Schaeffer  specifically  for 
the  championships,  and  after  the 
match  it  was  shipped  to  a  customer. 
Even  for  Schaeffer,  the  loss  of  such 
a  historic  machine  was  minor. 

"1  don't  feel  any  sadness  that  it  is 
he  said.  "In  some  sense  it  is 


movement  in  technology  of 
past  quarter  of  a  cent  in  >  I  In 
ternet. 
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scientists  in  the  Ka,|v  1970s  to 
make  what  some  researchers  argue 
was  the  first  true  transmission  of 
the  modern  Internet,  using  proto- 
type military  radios  tied  into  a  com- 
puter network. 

Dag  Spicer,  a  MS-y  ear-old  electri- 
cal engineer  and  curator  of  the  mu- 
seum, said  the  dilapidated  stale  of     souvenir  hunters  who  are  pouring 
lech  hisloi  v  is  simptv  a  reflection     thousands  of  dollars  into  the  vin- 
nr  the  warped  natuie  of  modern     tage  computer  market, 
life,  in  which  everything  seems  fo-         Four  months  ago,  a  4-foot-long 
used  on  the  next  great  thing.  piece  of  the  World  War  II  ENIAC, 

"The  problem  we  face  is  one  of     America's  first  working  digital 


rich  technologists,  putting  even  computers,  which  he  also  has  been  historic,  but  it  isn't  unique  or  any- 
more pressure  on  historians  to  find  selling  as  mementos.  thing." 

pieces  before  they  disappear  into  "When  I  bought  the  machines,  Perhaps  the  best-known  corn- 
private  collections,  no  one  wanted  them,  even  muse-  puter  of  modern  times,  IBM's  Deep 
EBay,  the  online  auction  com-  urns,"  said  collector  Tony  Cole,  Blue,  which  was  the  first  to  defeat  a 
pany,  has  a  bustling  category  for  who  runs  his  computing  collect-  chess  world  champion  in  match 
vintage  computers,  although  most  ibles  business  out  of  his  San  Mateo  play,  was  essentially  a  standard 
of  the  items  are  relatively  common  home.  "Now  they  don't  have  the  IBM  supercomputer  with  some  ex- 


personal  computers  from  the  1980s, 
such  as  the  <  'ommodore  ill  and  the 
IBM  PCjr. 

A  more  ominous  trend  is  the 
growing  number  of  collectors  and 


money  to  buy  the  stuff. 
against  them.  I  do  feel  bad,  but  not 
really  bad." 

Spicer  remembers  one  buyer 
who  picked  up  a  rare  IBM  main- 
frame with  the  plan  to  rip  out  its 
electronics  and  turn  it  mto  a  rolling 
mini-bar. 

"That's  like  cutting  off  the  nose 
of  the  Mona  Lisa,"  Spicer  said. 

There  have  been  many  silccess- 


tra  circuit  boards  for  chess  analy- 
sis. 

After  defeating  world  champion 
Garry  Kasparov  in  1997,  the  $2-mil- 
lion  IBM  computer  was  scheduled 
to  be  shipped  off  to  a  customer. 

Murray  Campbell,  one  of  the 
IBM  researchers  who  worked  on 
the  Deep  Blue  project,  said  there 
was  no  question  that  the  group 
would   save   the   special   circuit 


to  the  Intel 

has  been  working  for  the  last  four      j 
years  on  taking  snapshots  of  all  the 
files,  pictoies  and  text  on  the  Inter- 
net.  |j 

The  snapshots  are  largely  taken  , 
by  Alexa  Internet,  a  company  that  5 
makes  Web  search  and  navigation  il 
idols.  Alexa  has  crawled  the  Inter-  I' 
net  a  total  of  seven  times  since  the  r 
company  was  created  in  1996. 

"This  if  going  lo  be  an  ongoing      j 
record  of  what  things  were  like," 
said  Niall  O'Driscoll,  Alexa's  vice 
presidenl  of  engineering,  explain-      | 
ing  that  future  historians  will  be 
able  to  track  such  unpoi  tnnt  devel-      ] 
opments  as  the  start  of  ('-commerce 
and  the  growth  of  companies  like      | 
Amazon.com  and  EBay. 

Bui  he  added  that,  no  mailer 
how  complete  the  archive  is  m  the  ' 
future,  it  can  never  go  back  and  j 
save  what  was  lost  before  the  | 
crawls  began,  such  as  the  birth  of  , 
the  search  engine  Yahoo,  the  rise  [ 
of  Netscape  and  the  outpouring  of  r 
millions  of  messages  and  Web  t 
pages  from  people  debating  the  po-  i 
tential  uses  of  this  new  medium  r 
called  the  Internet.  I 

"Almost  zero  has  been  saved  • 
from  those  times,"  O'Driscoll  said.  f 
"It's  really  unfortunate  that  we  l 
don't  have  a  very  good  record  of  ' 
those  times.  It's  probably  all  gone;" 


THE  SUNDAY  TIMES 


7~~l 

Spies  behind  your  screen 


You  can  lock  your  door  and 

close  your  curtains,  but  they 

can  still  see  you.  Mark  Prigg 

and  Avrii  Williams  investigate 

why  you  are  outraged  by 

the  internet  snoops 


Imagine  a  closed-circuit  tek-Msion  camera 
watching  your  every  move,  constantly 
compiling  a  dossier  on  your  lifestyle,  per- 
sonal preferences  and  habits.  This  camera 
tracks  you  to  the  shops  you  visit  on  the 
hign  street,  watching  how  long  you  spend  in 
each,  what  you  look  at  and  what  you  buy.  It 
notes  precise  details  of  the  city  break  to  Rome 
you  bought  at  the  travel  agent,  and  the  details 
of  !he  film  for  which  you  bought  tickets  at  the 
local  cinema.  It  even  saw  which  credit  card 
you  used  to  make  each  purchase. 

From  this  pattern,  a  computer  behind  the 


scenes  second-guesses  what  you  are  likely  to 
w  ant  to  buy  next  and  so  puts  temptation  before 
you.  If  you  have  just  bought  a  weekend  trip  to 
Rome,  you'll  presumably  want  to  buy  a  travel 
guide  to  the  Italian  capital.  When  you  come 
out  of  the  cinema  tonight,  you'll  be  feeling  like 
a  bite  to  cat.  This  is  where  today's  all-seeing 
computer  software  is  really  clever:  it  can  pre- 
empt your  decision-making  by  placing  an 
advertisement  for  the  latest  Rough  Guide  to 
Italy  right  under  your  nose...  closely  followed 
by  a  reservation  for  tonight  at  the  Italian  tratto- 
ria closes;  to  your  local  cinema. 


This  is  not  the  stuff  of  science  fiction.  This 
Onvellian-sounding  scenario  is  unfolding 
every  minute  of  every  day  on  your  computer. 
Big  Brother  is  watching  your  every  move,  not 
actually  through  closed-circuit  television  cam- 
eras, but  the  21st-century  equivalent:  software 
that  registers  every  website  you  visit  and  every 
program  you  run.  to  create  a  complex  map  of 
your  every  mouse  click. 

This  Big  Brother  state  has  clearly  unsettled! 
consumers  on  the  other  side  of  the  Atlantic.  Law-  £ 
suits  have  been  launched  in  America  against  § 
Continued  on  page  48  ►• 
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»  Continued  from  page  47 
iealNetworks.  DoubleClick  and 
vlcxa.  a  subsidiary  of  Ami'oa.  Ail 
liege  thai  these  data-monitoring 
ompanies  infringe  the  individual's 
irivacy,  and  in  a  society  as  litigious 
,s  America,  experts  say  such  actions 
-present  the  lip  of  an  rceferg: 

The  biggest  row  has  been  over  the 
■  mall,  stealth-like  pieces  of  software 
*nown  as  spyw  are.  Only  last  month. 
he  toy  maker  Mattel  outraged  con- 
■umers  uhen  an  .American  journalist 
liscovered.  after  installing  a  Mattel 
game  for  his  daughter,  a  hidden 
piece  of  software  called  Brodcast 
(named  after  the  software  firm 
iiroderbund)  that  was  silently  con- 
necting his  PC  to  Mattel's  web 
server,  which  Mattel  claimed  was  to 
check  for  software  updates.  How- 
ever, privacy  groups  around  the 
world  were  quick  to  point  out  rhe 
software  had  many  more  capabili- 
ties, such  as  accessing  any  file  on  a 
PC.  or  tracking  exactly  how  often 
Mattel  games  were  played.  Mattel 
quickly  removed  Brodcast  from  all 
its  products. 

The  term  spyware  was  coined  two 
vears  ago  by  an  American  software 
u liter.  Sieve  Gibson,  who  has  since 
discovered  spving  devices  in  hun- 
dreds of  pieces  of  commonly  used 
software.  He  believes  that  if  v ou  reg- 
ularly use  a  computer,  you  almost 
certain!}  have  spy- 
vare  on  vour 


about         23m 
piece.--   c'   sjfc"- 
ware     currently 
installed  on 

machines   v.  uhout 
users'  knowl- 
edge." Gibson  told 
Doors.  His  website. 
www.grc.com. 
attempts  to  track  new- 
pieces  of  spyware  as 
they  are  produced.  He 
also      singlehandedly 
caused  an  uproar  in  the 
computer  industry  last 
year   when   he   exposed 
spvv.aie    in    more    than 
400  free  downloads.  This 
spy  ware .  made  by  the  Ameri- 
can company  Radiate,  was 
designed  to  track  advertise- 
ments, but  users  were  not 
told  of  its  installation  and 
only  by  chance  did  Gibson 
stumble  across  it.   He  has 
ice  forced  Radiate  to  own 
ip  to  its  activities,  mougti 
not  until  about  23m  cop- 
ies of  the  spyware  had 


been  downloaded,  and  has  waged  a 
one-man  campaign  against  stealth 
llhU  liinx  on  computers. 

"The  fuss  over  privacy  created  by 
all  this  is  incredible,"  he  says.  "But 
that's  as  it  should  be:  there  is  a  huge 
problem  here,  and  the  opportunity 
for  abuse  is  huge'  Something  fcys  to 
be  done."  But  what?  To  test  every 
piece  of  software  for  hidden  spyware 
is  impossible,  as  it  would  require 
manufacturers  to  own  up  to  tracking 
their  customers'  habits.  Gibson 
suggests  extremely  heavy  fines  for 
those  found  to  have  compromised  a 
PC  —  in  other  words,  stealing  data 
front  the  user. 

"Spsware  has  the  capability  to 
penetrate  any  file  on  my  PC  and 
send  it  to  a  web  server."  he  says.  "It 
takes  just  a  few  code  changes  and 
this  software  could  become  the  ulti- 
mate hackeis  toe*. 

Several  hackers  have  written  soft- 
wate  that  does  exactly  this  —  giving 
them  illegal  access  to  your  PC,  to 
delete  files  and  upload  images,  even 
take  control  of  vein  mouse  and  "key- 
board —  in  a  code  that  is  impercepti- 
ble to  all  but  the  most  proficient  user. 
Anyone  worried  about  spyware  can 
download  Gibson's  OptOut.  which 
claims  to  detect  and  eliminate  spy- 
ware  that  interrogates  your  PC.  Visit 
Gibson's  website  and  it  will  present 
all  the  information  it  can  read  about 
vou  Ihere  and  th.^n.  It's  a  chilling 
exercise  when  you  consider  that  any 
web   retajler   or   hacker   with    the 
kno'-  -how  can  play  the  same  game. 
If  y^'ii  are  feeling  particuiarlv  para- 
noid sites  such  as  www.anqny^nizer. 
com  let  you  surf  the  web  while  con- 
cealing personal  details  from  spving 
eyes.  Even  better,  the  service  is  free. 
Rumour  has  it  that  Sufiah  Yosef.  the 
missing  15-year-old  maths  prodigy, 
recently  used  Anonv  ntizer  to  conceal 
her  location  from  her  parents. 

Unsurprisingly.  Radiate  is  not  one 
of  Gibson's  fans,  and  says  it  has 
made  several  changes  to  its  software 
since  his  expose\  According  to  Peter 
Fuller.  Radiate  s  director  of  corpo- 
rate communications,  spyware  i<  the 
wrong  term  for  what  it  writes. 

"What  we  do  is  let  consumers 
download  software  free,  in  exch: 
for  viewing  adverts  in  their  menu  bar. 
To  do  that  we  install  ad-management 
software  on  the  user's  PC  and 
counter  files  to  check  which  ads  they 
are  v  ievving  and  which  they  click  on. 
"There  is  nothing  nefarious  going 
on  behind  the  scenes.  Sure,  our  soft- 
ware has  the  capability  to  spy  on 
usc-ts.  bin  we  absolutely  don't  doit. 
These  so-called  'privacy  advocates' 
who  coined  the  term  spyware  are 


Things 
they 
know 
about 


J\  >■ 


Top  1 0  By  monitoring 
which  COs  you  buy  and 
which  music  websites 
you  visit,  online  retaileis 
tailor  their  service  to 
your  taslos 

MP3  downloads  The 
music  you  download  is 
logged  by  both  music 
providers  and  the 
companies  that  matte  the 
software  lo  play  music 
on  your  PC.  In  the  future, 
the  software  may  watch 
for  illegal  downloads  and 
disable  them 

Mobile  phone  The 
advent  of  Wap  (wireless 
transmission)  means  that 
your  online  browsing  is 
monitored  by  mobile- 
phone  networks 
desperate  to  find  out 
which  of  their  partner 
sites  is  the  most  popular. 
Site  owners  monitor 
which  pages  you  see. 
Networks  monitor  the 
number  of  voice  rails 
you  make  and  offer  you 
alternative  tariffs 

Computer  Software  such 
as  the  popular  CuteFTP 
internet  file  download 
package  monitors  the 
ads  you  receive. 
Applications  such  as 

Windo.TS  98  scour  your 
Ak.     hard  drive  and  send 
,  details  of  your 
machine  and  its 
LtenisjQ 

panies 


There  is  no  avoiding  cookies  on  the 
web.  According  to  the  data  firm 
Fletcher  Research,  53%  of  UK 
websites  use  cookies  to  profile  their 
visitors,  while  43%  employ  some  type  of 
registration  form  to  further  classify  us. 
Cookies  —  tiny  identity  tags  transmitted 
from  websites  to  lodge  inside  your 
computer—  have  been  portrayed  as  Big 
Brother's  online  incarnation,  but  before 
human  nature  and  your  natural  desire  for 
p>ivacy  kicks  In,  the  news  is  not  all  bad. 

'  A  cookie  is  just  a  technical,  21st-century 
term  for  a  phenomenon  that  has  been  part 
of  high-street  trading  for  decades.  The 
details  a  customer  volunteers  when  joining 
a  supermarket's  loyalty-card  scheme, 
cross-referenced  against  what  you  buy 
at  the  till  each  week,  give  a  bricks-and- 
mortar  retailer  precisely  the  same 
information  as  a  cookie.  The  profile  of  you 
that  a  shop  builds  from  this  data  has  been 
used  to  targe!  advertising  and  tempt  you  to 
buy  more  goods  for  as  long  as  marketing 
has  existed. 

One  body  of  opinion  argues  that  most 
cookies  benefit  the  online  customer. 
Amazon,  one  of  the  web's  tnternatiorvat 
superstores,  deploys  cookies  to  recognise 
its  customers  and  make  personal 
recommendations  every  time  they  come 
Into  its  virtual  store.  Not  only  does  the 


website  greet  you  by  name,  but  if 

you  have  bought  the  first  three 

Harry  Potter  books,  for  example. 

Amazon  will  aleit  you  with  an 

instant  recommendation  as 

soon  ns  the  latest  Potter  book 

comes  hot  off  the  press.  Each 

time  you  make  a  purchase, 

the  company  also  performs  a 

behind-the-scenes  search 

on  its  other  customers' 

buying  habits,  so  if 

customers  who  bought 

Harry  Potter  and  the  Goblet  of  Fire 

also  bought  The  Devil's  Teardrop  by 

Jeffery  Deaver,  Amazon  will  recommend 

Deaver  to  you,  too. 

The  website  automatically  generates  Top 
100  bestseller  lists  of  books,  CDs,  DVDs 
and  videos  based  entirely  upon  buying 
habits.  Profiling  its  20m  customers  around 
the  globe  is  no  easy  task,  but  it  apparently 
i  'japs  rewards:  the  comparTy  ctairns  73%  of 
its  customers  as  repeat  buyers. 

Amazon's  managing  editor  in  the  UK, 
Rachel  Holmes,  insists  that  customers 
have  nothing  to  fear  from  cookies  as  long 
as  1hey  choose  reputable  shopkeepers  and 
brands  they  recognise.  She  says  Amazon 
never  sends  its  customers  unsolicited 
e-mail  messages  or  sells  any  of  the 
personal  information  it  holds  to  third 


Buy  a  Harry  Potter 
book,  and  Amazon 
will  alert  you  when 
the  next  is  out 

parties.  It  does, 
however,  use  e-mail 
alerts  for  new 
products,  if  a  customer 
has  explicitly  agreed  to 
be  on  their  mailing  list. 
For  the  hundreds  of 
thousands  of  newcomers 
to  the  web,  however, 
choosing  a  reliable  online 
brand  can  be  daunting  —  after  all,  many 
have  been  running  for  only  a  few  months. 
"There needs  to  bean  obvious  security 
guarantee,  telephone  numbers  for  the 
company  clearly  displayed  and  secure 
servers  used  to  protect  a  customer's 
details,"  Holmes  advises, 

DaraeJ  Gestetner,  the  GEO  of 
ShopSmart,  agrees  that  cookies  are  good 
news  for  consumers.  "Profiling  is  great. 
Information  is  king,  as  long  as  retailers  are 
never  tempted  to  sell  it." 

But  then,  in  a  consumer  society,  the 
temptation  Is  ever-present  —  there  is  a 
ready  market  for  any  mailing  list  of 
consumer  profiles,  every  one  of  which 
reveals  shopping  habits  in  intimate  detail. 


The  argument  against  the  cookie  crumbles 


trying  lo  instigate  an  Onvc! 
Han  nightmare  iri  con 
sunlers'  minds.  There 
is  nr>  rjr»K  for  u.  You 
can  either  pay  for  soft 
wave  or  have  our  free 
version,    if    y 
agree    to    \\e\ 

simpl 

30m      customers 

using  its  software,  and 

400  pieces  of  software  that  incorpo- 

Howevcr.  the  contoversy  over  sur- 
veillance extends  far  beyond  spv- 
wnre  Big  Brother  comes  into  His 
own  every  time  yen  connect  to  the 
web,  because  almost  ever)  website 
you  visit  will  use  a  piece  of  cede 
known  as  a  cookie  lo  track  your 
movements.  These  devices  arc  He 
more  than  short  text  strings  that  piss 
from  a  given  website  to  your  compu- 
ter, where  they  arc  stored.  Like  a 
dry-cleaning  ticket  that  identifies  the 
dark  blue  suit  as  belonging  to  v'«i. 
the  cookie  records  information  spe- 
cific to  each  visitor 

Cookies  were  designed  lo  enable  a 
website  to  recognise  you  each  time 
yraj  lewm.  When  linked  mi"  ,m 
online  retailer's  profiling  technology, 
the  cookie  compiles  a  record  of  all 
the  holidays  or  cinema  tickets,  for 


ample,  that  you  have 
?uglil.  building  data 

no-file    that    reflects 
>ur  unique  tastes  and 
•pending        power. 
Such    a    consumer 
database  is  invalua- , 
We  to  rtieffirect- 
tnarkctinc  indus- 
try, as  jt  long  has 
been  in  the  offline 
world,  and.  once  dissem- 
inated, accounts  (o\  the  junk  mail  that 
drops  through  your  letter  box.  seem- 
ingly for  a  lifetime 

The  problem  with  both  spywarc 
and  cookies  i?  lepwlairnn.  By  ilt  ver> 
nature,  the  web  has  no  governing 
body  and  no  police  force  to  ensure 
retailers  care  for  and  protect  our  per- 
sonal profiles  in  a  responsible  man 
»ei.  While  the  Data  Prelection  Ac!  m 
the  UK  ensures  that  consumers  are 
made  aware  of  how  their  personal 
data  is  to  be  exploited  -  and  arc 
given  the  option  of  ha\  ing  thtirconfi- 
dewiality  maintained  —  to  enforce 
this  policy  across  a  medium  as  large 
as  the  internet  is  impractical. 

Yaman  Akdeniz.  rounder  of  the 
Cyber-Rights  &  Cyber- Liberties,  a 
nou-pvotu  lobby  group,  even  svrg 
gests  that  cookies  can  perform  a  serv- 
ice for  consumers,  and  admits:  "I'm 
not  completely  against  the  idea/'  lie 


believes  online  retailers  need  to  be 
more  overt  in  their  use  of  cookies, 
however,  and  hand  back  to  consum- 
ers the  choice  of  whether  lo  trse 
them  or  not  He  nevertheless 
believes  that  tire  use  of  cookies 
needs  policing.  "I  Imst  Amazon  but 
1  don't  trust  the  rest." 


He  i<c 
display  the 


as  one  of  his  interests.  As  a  result. 
Akdeniz  has  been  added  to  futthcr 
pornographic  mailing  lists  and  has 
been  sent  numerous  unsolicited 
mailshots.  Onre.  the  inaccurate  pro- 
file had  be  n  created,  it  was  dnwn  to 
Akdeniz   to  backtrack   through  his 


will  or  will  not  pass  on  a  customer's 
personal  details  to  third  panics 
According  to  Akdeniz,  even  though 
companies  are  bound  by  the  Data  Pro- 
tection Act  in  the  UK.  loo  few  tell 
consumers  clearly  enough  how  their 
personal  information  will  be  v-ed.  He 
is  calling  for  a  Stop  Cookie  button  to 
be  displayed  as  prominently  on  an 
internet  browser  as  the  Back.  For- 
ward and  Home  button-  -—  some- 
thing Microsoft  Iras  tusr  announced 
will  appear  on  the  next  version  of  its 
Internet  Explorer  browser. 

'Even  ]  forget  cookies  are  always 
there  and  forget  to  turn  them  off." 
the  web  M-teran  admits  The  reper- 
cussions can  be  terrifying.  As  pad  of 
his  role  at  Cyber-Rights  &  Cyber- 
Libcrlics,  Akdeniz  has  at  limes 
needed  to  visit  some  of  the  more 
unsavoury  pornographic  sites  on  the 
web.  Because  cookies  have  been 
transmitted  by  such  sites,  his  data- 
based  profile  now  lists  pornography 


clctci  newcomers  from  going  online 
altogether  V  here  the  experts  agree  is 
that  electronic  tracking  will  nol  go 
away  —  for  every  privacy  initiative 
put  forward,  there  is  an  Unsavoury 
company  willing  to  write  software  to 
circumvent  it  and  profit  from  selling 
data.  In  the  electronic  age.  there  is  no 
escape  from  Big  Brother.  3 
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Jb  t  may  have  once  been  true  that 

"3  on  the  Internet  no  one  knew 
s&  you  were  a  dog,  as  illustrated  in 
an  old  New  Yorker  cartoon.  But  as 
they  say  on  the  Web  now,  these  days 
marketers  probably  know  your  fa- 
vorite brand  of  dog  food.  In  fact,  you 
may  have  told  them  yourself,  in  ex- 
change for  a  discount  coupon. 

An  amazing  amount  of  personal  in- 
formation is  readily  available  on  the 
Net.  For  example,  if  you've  forgotten 
the  date  of  a  friend's  birthday,  just 
check  http://anybirthday.com.  That 
brings  up  another  disquieting  thought. 
Just  how  many  companies  or  Web  sites 
use  a  birth  date  to  verify  identification? 
Once  you  know  the  birthday,  it's  simple 
to  send  a  free,  digital  greeting  card,  but 
when  you  e-mail  that  card  to  a  friend, 
have  you  also  given  it  to  marketers 
looking  for  new  customers?  In  fact, 
have  you  compromised  your  friend's 
privacy  or  passwords? 

It  is  not  only  individuals  who 
worry  about  privacy.  So  do  compa- 
nies, though  businesses  may  call  the 
problem  one  of  confidentiality.  We  all 
know  company  information  is  readily 
available  on  the  Net.  As  the  greatest 
competitive  intelligence  gold  mine  of 
modern  times,  the  Internet  is  now  rife 
with  cyber-prospectors  and  claim- 
jumpers.  Many  information  profes- 
sionals are  familiar  with  the  dichotomy 
of  searching  the  Internet  for  as  much 
information  on  the  competition  as  pos- 
sible, while  trying  to  help  prevent  our 
own  companies  and  our  fellow  em- 
ployees from  posting  too  much. 

In  fact,  we  ourselves  must  be  care- 
ful not  to  disclose  too  much.  As  infor- 


mation professionals,  sometimes  the 
very  questions  we  ask  can  be  too  re- 
vealing —  even  without  identifying  in- 
formation attached.  Searchers  could 
seriously  compromise  companies'  in- 
terests if  certain  patent  or  trademark 
questions  became  known.  Also,  given 
the  rapid  improvements  in  database 
mining  techniques,  it's  possible  that 
merely  an  increased  number  of  ques- 
tions concerning  a  particular  company 
or  technology  could  tip  off  investors  to 
impending  business  activities. 

While  the  marketing  arms  race 
rages  on  the  new  Web  frontier,  infor- 
mation professionals  must  carefully 
balance  privacy  concerns  against  con- 
venience, efficiency,  and  cost  issues. 
It's  another  information  dimension  to 
take  into  account,  along  with  more  fa- 
miliar themes  of  information  owner- 
ship/rights, fair  use,  verifiability,  cur- 
rency, etc.  But  missteps  along  the 
virtual  privacy  dimension  of  infor- 
mation could  have  disastrous  conse- 
quences for,  clients  and  information 
professionals  alike.  This  article  pre- 
sents some  of  the  issues  and  questions 
involved  in  online  privacy  from  the  in- 
formation professional's  perspective. 
We  offer  it  as  a  resource  for  making 
more  informed  decisions  in  this  rapidly 
changing  area. 

Privacy  Concerns 

of  Information  Professionals 

Versus  Consumers 

Privacy  is  a  hot  topic  this  election 
year,  with  discussions  in  government 
legislatures,  court  decisions,  and  lots 


of  articles  in  both  the  popular  and  pro- 
fessional press.  Much  of  this  media 
coverage  has  focused  on  consumer 
privacy.  While  some  of  these  issues 
overlap/the  privacy  concerns  of  infor- 
mation professionals  can  differ  signif- 
icantly from  consumer  concerns  in 
several  areas: 

1.  The  definition  of  "sensitive"  infor- 
mation —  For  consumers,  sensitive 
"identifying"  information  includes 
name,  address,  credit-card  numbers, 
SSNs,  etc.  Information  professionals 
have  broader  concerns  along  this  axis 
of  information  privacy: 

•  A  company  is  often  more  easily 
identified  than  an  individual,  and 
the  identifying  information  less 
well-protected.  For  example,  many 
Web  sites  capture  surfers'  IP  ad- 
dresses, which  can  be  traced  back 
to  specific  companies. 

•  The  definition  of  what  might  iden- 
tify individuals  or  companies  is 
changing  due  to  improvements  in 
database  and  data-mining  software. 

•  Key  information  may  be  revealed 
solely  through  the  substance  of  the 
questions  asked,  without  anyiden- 
tifying  information  attached. 

2.  Motive  —  Consumers  seek  pri- 
vacy primarily  to  avoid  infor- 
mation harvesting  for  market- 
ing purposes,  while  searchers 
seek  to  guard  their  clients  from 
competitive  intelligence  gather- 
ing as  well. 

3.  Roles  played  —  Consumers  act 
primarily  for  themselves  and 
their  families,  whereas  informa- 
tion professionals  usually  serve 
as  information  intermediaries, 
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acting  for  their  clients  and  com- 
panies. Info  pros  may  also  have 
information  privacy  responsi- 
bilities extending  beyond  their 
own  direct  actions  and  deci- 
sions. They  may  play  a  leader- 
ship role  in  educating  their  com- 
panies, clients,  and  co-workers 
about  information  issues  and 
provide  input  for  information 
policy  formulation. 
Some  privacy  solutions  may  apply 
equally  well  to  both  info  pros  and  con- 


sumers. For  example,  consumers  are 
advised  to  designate  only  one  credit 
card  for  Internet  purchases  and  to  scru- 
tinize bills  carefully  in  an  attempt  to 
minimize  any  losses  through  security 
lapses.  Of  course,  info  pros  should  fol- 
low the  same  practice  with  company 
credit  cards.  Some  of  the  advice  relat- 
ing to  "sensitive  questions"  could  apply 
to  both  consumers  and  information 
professionals,  though  the  application 
of  that  advice  may  apply  to  different 


subjects,  e.g.,  medical  conditions  ver- 
sus potential  acquisition  targets. 

Some  privacy  concerns  regarding 
online  research  may  primarily  interest 
information  professionals.  However, 
it's  interesting  to  note  how  many  top- 
ics, previously  of  interest  solely  to  info 
pros,  have  migrated  into  broader  are- 
nas of  discussion.  Many  Internet-re- 
lated topics,  such  as  search  engine 
technology,  electronic  copyright  is- 
sues, and,  of  course,  privacy  concerns, 
frequently  discussed  across  the  length 
and  breadth  of  the  Net  were  introduced 
in  the  information  science  literature. 

Query  Confidentiality  —  When 

It  Can  Hurt  to  Ask 

If  the  substance  of  certain  queries 
became  known,  particularly  queries 
concerning  intellectual  property  and 
legal  subjects,  it  might  cause  signifi- 
cant problems  for  clients.  For  exam- 
ple, a  trademark  must  be  maintained 
and  "in  use"  in  order  to  remain  valid. 
If  a  competitor  were  alerted  that 
someone  was  inquiring  about  their 
trademark,  they  could  quickly  "dust  it 
off"  and  put  it  back  in  use.  Addition- 
ally, if  the  company  holding  the  trade- 
mark became  aware  of  external  inter- 
est in  the  trademark,  the  company's 
executives  would  be  much  better  pre- 
pared for  negotiating  a  higher  price 
for  licensing  the  trademark's  use. 

Another  example  might  be  a  search 
for  a  domain  name.  As  the  market  price 
paid  for  catchy  domain  names  soars, 
you  might  wonder  about  the  privacy  of 
the  "Is  this  domain  name  available?" 
search  itself.  Could  a  domain  name 
search  site  watch  for  specific  interest- 
ing queries,  then  grab  the  idea  and  reg- 
ister it  quickly  before  you  have  a 
chance?  Could  the  same  site  regularly 
notify  paying  clients  when  inquiries  ap- 
pear close  to  their  licensed  domain 
names?  Or  might  someone  use  a  net- 
work sniffer  [see  the  "Tech  Talk"  sidebar 
beginning  on  page  44  for  more  infor- 
mation] to  track  inquires  on  a  specific 
site? 
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In  patent  searching,  one  could  really 
find  out  quite  a  lot  about  a  proposed 
invention  by  examining  the  search 
strategy,  particularly  within  the  sci- 
ences and  in  technical  fields.  The  in- 
formation thus  revealed  might  even 
give  the  idea  away  completely  —  or  at 
least  allow  others  to  start  develop- 
ments along  the  same  path. 

Asking  certain  questions  might  trig- 
ger other  kinds  of  privacy  attacks.  For 
example,  inquiries  into  particularly  sen- 
sitive areas  might  alert  a  company  to 
someone's  interest;  the  company  could 
then  try  to  get  a  subpoena  and  force  the 
ISP  or  search  site  to  reveal  who  was  ask- 
ing. Particular  inquiries  might  alert  a 
government  department  or  organiza- 
tion, which  might  have  an  even  easier 
time  finding  out  who  was  asking. 

And  of  course,  in  matters  involving 
litigation,  it  becomes  crucial  to  find 
out  who  knew  what  and  when  they 
knew  it.  Knowing  what  one  party's  re- 
searchers searched  for  in  very  specific 
subjects  could  give  a  good  deal  of  cir- 
cumstantial evidence  to  the  opposing 
side.  It  certainly  might  give  more  force 
to  a  company  or  opposing  party's  ar- 
guments for  subpoenas  or  discovery 
motions. 

Is  Your  Computer  Secure? 

It's  important  to  start  a  quest  for  on- 
line privacy  by  securing  your  computer 
from  intrusion.  Various  products  can 
assist  you,  including  access  control 
software  and  hardware,  encryption 
software,  security  testing  sites  and  soft- 
ware suites,  firewalls  (especially  im- 
portant for  high-speed,  "always  on" 
connections),  and  physical  security 
systems.  There  are  special  solutions  for 
laptop  security  while  traveling,  includ- 
ing cables,  theft  alarms,  and  even  some 
ways  to  restrict  the  angles  of  view  on 
your  laptop  to  prevent  your  airline 
seatmate  from  seeing  your  work. 

[Detailed  discussion  of  most  of  these 
items  falls  beyond  the  scope  of  this  ar- 
ticle, but  information  is  available  in  the 
sidebars.  For  more  information,  also 
see  S.  Kennedy,  "Through  the  Virtual 


Back  Door  —  Cyber-Sneaks  Can  Enter 
Your  Computer  Without  You  Even 
Knowing,"  Information  Today,  vol.  17, 
no.  2,  February  2000,  http://www.info 
today.com/it/febOO/kennedy.htm,  and 
various  computer  accessory  sites  such 
as  http://www.a2zsolutions.com/  and 
http:  /  /  www.pcguardian.com.] 

One  particular  "personal"  firewall, 
ZoneAlarm  2.0,  is  worth  mentioning 
here  since  it  provides  two-way  protec- 
tion. It  alerts  you  whenever  an  outside 
computer  tries  to  communicate  with 
your  computer  through  the  Internet  or 
if  a  program  in  your  computer  tries  to 
communicate  with  others  on  the  In- 
ternet. You  can  set  Zone  Alarm  to  pass 
all  communications  by  a  particular 
program — your  browser,  for  example 
—  or  to  refuse  all  communications,  or 
to  alert  and  ask  you  each  time.  This 
can  be  very  effective  in  detecting  and 
defeating  programs  that  attempt  to 
communicate  your  internal  informa- 
tion to  outsiders  without  your  knowl- 
edge or  consent.  There's  a  detailed  dis- 
cussion of  ZoneAlarm  2.0  at  http:// 
grc.com/su-firewalls.htm;  it's  free  for 
noncommercial  use  and  available  at 
http://www.zonelabs.com/. 

Technology  Basics  —  E-Mail 
and  Surfing 

To  understand  how  to  protect  your 
privacy  online,  you  should  learn 
some  of  the  mechanics  of  what  hap- 
pens during  online  sessions.  The 
choices  you  make  about  which  soft- 
ware you  use  can  determine  what 
data  others  can  gather  about  you  or 
your  company. 

Did  you  know  that  your  browser 
routinely  sends  several  bits  of  infor- 
mation about  you  and  your  computer 
with  every  Web  page  you  access,  in- 
cluding browser  environment  vari- 
ables and  possibly  even  cookies'?  [See 
the  "Tech  Talk"  sidebar  for  definitions 
of  italicized  terms.]  Your  information 
can  then  be  forwarded  to  advertisers, 
who  can  compile  databases  of  infor- 
mation about  everyone  who  accesses 
any  of  their  ad  sites. 


Using  software  such  as  Cookie  Man- 
agers or  Proxies  can  help  limit  privacy 
violations  while  surfing.  New  tech- 
nologies are  emerging  which  are  a  hy- 
brid of  several  forms  of  privacy  man- 
agement, such  as  Zero_Knowledge 
Systems'  Freedom  [http://www.free 
dom.net]'.  Freedom  allows  you  to  cre- 
ate customized  "nyms"  (short  for  pseu- 
donyms) that  you  can  use  to  take  ad- 
vantage of  the  personalization  features 
of  some  Web  sites,  while  assuming  an 
alternate  identity  at  other  sites. 

You  can  also  think  about  how  to 
limit  possible  privacy  violations  when 
using  e-mail.  How  can  you  guarantee 
that  only  the  intended  recipient  has  ac- 
cess to  the  message?  Unlike  the  return 
receipt  options  of  LAN  (Local  Area 
Network)  based  e-mail  systems  such  as 
Lotus  Notes  or  Microsoft  Exchange,  In- 
ternet-based e-mail  systems  may  not 
technically  ensure  that  the  recipient 
has  received  the  message  at  all. 

Many  users  take  similar  approaches 
to  both  e-mail  and  Web  surfing  privacy 
management.  Establishing  separate  e- 
mail  accounts  for  different  projects  can 
create  temporary  "new  identities."  Free 
Web-based  e-mail  services  such  as 
HotMail  [http://www.hotmail.com]  are 
readily  available,  but  review  other  pos- 
sibilities at  http://wwwfree-email-ad- 
dress.com/.  Don't  overlook  the  option 
of  using  (pseudo-)  anonymous  re-mail- 
ing. Encryption  tools  such  as  PGP  can 
encrypt  and  digitally  sign  e-mail, 
thereby  hiding  it  from  prying  eyes, 
but  these  tools  can  be  unwieldy  and 
difficult  to  use. 

Another  problem  with  e-mail  is  that 
e-mail  messages  can  last  forever,  as  il- 
lustrated recently  in  the  Microsoft 
anti-trust  hearings.  There  is  a  new 
breed  of  Web-based  e-mail  service 
that  can  solve  many  of  these  prob- 
lems. Their  advanced  features  can  in- 
clude time-based  expiration  and  even 
self-destructing  messages,  return  re- 
ceipts, and  automatic  encryption  of 
incoming  and  outgoing  messages.  Ex- 
amples of  these  new  e-mail  services 
include  Hush  Communications  Hush- 
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Mail  [http://www.hushmail.com]  and 
ZipLip  [http://www.ziplip.com]. 

Information  about  you  can  be  col- 
lected even  when  you  are  not  brows- 
ing or  using  e-mail.  An  example  of 
this  trend  is  the  Sponsored  Software 
promoted  by  companies  such  as  Ra- 
diate [http://www.radiate.com].  Ra- 
diate pays  shareware  and  commercial 
software  manufacturers  for  placing 
advertisements  within  its  applica- 
tions. Radiate  then  collects  informa- 
tion gathered  from  the  applications' 
users  and  returns  the  aggregated  data 
to  their  clients. 


Searching  —  Pick  a  Search 
Engine  That  Doesn't 
Pick  You  Over 

Many  Internet  search  engines  rou- 
tinely collect  users'  search  terms.  Such 
collection  might  even  form  an  integral 
part  of  their  business  plans.  Like  many 
other  Internet  portals  and  sites,  many 
Internet  search  engines  are  funded  by 
advertising  revenue.  These  sites  get 
more  money  if  they  can  attract  more 
people  to  view  the  ads,  and  even  tailor 
those  ads  to  their  user's  interests  — 
which  are  often  revealed  by  the  search 
terms  requested.  Have  you  ever  no- 
ticed a  banner  ad  on  a  search  site 
change  to  reflect  a  theme  similar  to  the 
subject  you're  searching?  Sometimes, 
it  can  become  almost  comical.  Try 
putting  in  an  arcane  subject  or  a  long, 
complex  search  statement  at  Yahoo! 
and  watch  the  little  Amazon.com  box 
jump  up  on  your  results  page  claiming 
it  has  whole  books  on  whatever  sub- 
ject you  entered. 

As  early  as  1996,  both  Lycos  and  In- 
foseek  announced  plans  to  record 
users'  search  terms  and  build  profiles 
in  order  to  offer  customized  advertising 
and  content.  Robin  Johnson,  then- 
president  of  Infoseek,  said,  "The  idea 
is  to  capture  someone's  behavior  and 
use  that  information  to  put  future 
searches  into  context"  [Inter@ctive 
Week,  7/23/96,  http://www.zdnet. 
com  /  inrweek/  daily  /  960723b.html] . 


Here's  an  extract  from  Google's  pri- 
vacy policy:  "Google  may  share  infor- 
mation about  you  with  advertisers, 
business  partners,  sponsors,  and 
other  third  parties.  However,  we  only 
divulge  aggregate  information  about 
our  users  and  will  not  share  person- 
ally identifying  information  with  any 
third  party  without  your  express  con- 
sent. For  example,  we  may  disclose 
how  frequently  the  average  Google 
user  visits  Google,  or  which  other 
query  words  are  most  often  used  with 
the  query  word  'Linux'"  http://www. 
google.com/privacy.html. 

Some  "search  voyeur"  sites  even  al- 
low users  to  view  others'  searches. 
Search  Engine  Watch's  "What  People 
Search  For"  page  lists  search  sites  that 
offer  Live  Search  Displays,  Top  Key- 
word Lists,  and  Keyword  Databases  at 
http:  /  /  searchenginewatch.internet. 
com/facts/searches.html.  Would  you 


says  that  no  information  is  distrib- 
uted outside  IBM,  nor  used  for  com- 
petitive intelligence  within  IBM  [http:  /  / 
patent.womplex.ibm.com/welcome]. 
In  addition,  the  policy  states,  "Search 
queries  are  never  correlated  with  a  spe- 
cific IP  address  or  user"  [http: //patent. 
womplexibm.com/privacy] . 

The  confidentiality  of  patent 
queries  submitted  to  the  U.S.  Patent 
and  Trademark  Office  (USPTO)  server 
[http://www.uspto.gov]  came  under 
discussion  on  the  Patent  Information 
Users'  Group  list  (PIUG-L)  a  while  ago. 
Since  governmental  organizations 
have  the  responsibility  to  provide  in- 
formation to  the  public  under  the 
Freedom  of  Information  Act  (FOIA), 
patent  searchers  wanted  to  know  ex- 
actly what  information  the  site  col- 
lected on  searchers. 

Jane  Myers  of  the  USPTO  replied, 
"The  PTO  maintains  logs  ...  [which] 
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make  a  different  decision  about  which 
search  site  to  use  if  you  knew  others 
might  see  your  search  terms  —  or  re- 
peat your  searches? 


Patents  —  Doubly  Careful 

Maintaining  the  confidentiality  of 
search  terms  becomes  particularly  im- 
portant in  patent  and  intellectual  prop- 
erty searches.  In  these  searches,  just  the 
questions  asked  could  give  away  im- 
portant competitive  advantages. 

The  IBM jmejlectualj^qperty  Net- 
work Internet  patent  search  site  is  a 
good  example  of  how  user  privacy 
concerns  could  be  answered  in  a 
straightforward  manner.  It  clearly 


could  be  requested  under  FOIA. 
Our  Solicitor  would  decide  what  to  re- 
lease. Logs  contain  the  IP  address  of 
those  accessing  the  PTO  Web  site,  which 
could  be  used  to  determine  further  in- 
formation about  the  origin  of  the  re- 
quest...  .  Logs  contain  time  of  access  but 
not  length  of  time  online.  Patents  re- 
trieved during  a  search  are  not  logged; 
search  strategies  are  not  logged."  [See 
the  full  text  of  this  quote  at  http:  /  /www. 
derwent.com/piugl98/0762.html.] 

In  an  interesting  turn,  these  confi- 
dentiality questions  led  to  further  dis- 
cussion of  the  somewhat  reflexive  prac- 
tice of  using  an  FOIA  request  to  get 
information  on  previous  FOIA  requests, 
as  a  source  of  competitive  intelligence. 
An  example  of  the  results  from  one  such 
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request,  which  shows  the  subjects  and 
requestors  of  previous  FOIA  requests,  is 
available  at  http://www.derwent.com/ 
piugl98/0841.html. 

[More  messages  in  this  discussion 
are  available  at  http://www.derwent. 
com/piugl98/.] 

It's  possible  that  this  PIUG-L  dis- 
cussion had  a  far-reaching  effect,  since 
the  privacy  policy  previously  posted  on 
the  USPTO  Web  site  [see  http://www. 
derwent.com/piugl98/0675.html]  was 
changed  shortly  thereafter.  The  current 
USPTO  privacy  policy  states:  "Please 
note  that  PTO  does  not  record  or  log 
the  parameters  of  search  requests  sub- 
mitted to  these  databases.  Such  uncol- 
lected information  has  thus  never 
been  disclosed  through  sale  or  FOIA 
request,  intentionally  or  otherwise,  to 
any  third  party.  PTO  does  not  plan  to 
change  this  operational  policy"  [http:  /  / 
www.uspto.gov/patft/index.html] . 

Traditional  Subscriber-Based 
Search  Services 

Search  services  based  on  subscriber 
revenues  have  financial  incentives  to 
keep  customer  information  and  queries 
confidential,  since  users  will  take  their 
business  elsewhere  if  they  don't  get  the 
privacy  they  expect.  Certainly,  help  desk 
personnel  at  traditional  search  services 
have  long  stated  that  queries  and  sub- 
scriber identities  are  kept  highly  confi- 
dential. Given  the  importance  of  this  is- 
sue to  users,  you  might  expect  that 
formal  confirmation  of  this  policy 
would  be  prominently  placed  in  the 
material  available  from  the  services.  But 
when  we  looked,  we  did  not  find  clear 
statements  of  these  policies  on  the  con- 
fidentiality of  queries;  at  least,  it  was  not 
readily  apparent.  Perhaps  more  rigor- 
ous searches  would  uncover  them,  and, 
we  admit,  we  did  not  contact  the  search 
services  directly.  (Perhaps  this  issue 
might  be  addressed  more  comprehen- 
sively in  a  future  article.) 

Traditional  search  services  are  def- 
initely sensitive  to  the  issue  of  query 
confidentiality.  Dialog's  ERA  (Elec- 
tronic Redistribution  and  Archiving) 


service,  begun  back  in  the  early  1990s, 
created  a  stir  when  users  realized  that 
some  file  producers  wanted  the  ac- 
cession number  of  the  items  redistrib- 
uted —  through  which,  presumably, 
the  queries  could  be  deduced.  Some 
file  producers  wanted  the  identities  of 
the  users  as  well. 

Some  traditional  search  services  do 
have  well-publicized  policies  regard- 
ing the  privacy  of  personally  identify- 
ing information  —  at  least  in  the 
databases  provided.  LEXIS  was  badly 


Dialog  Corporation.  We  view  a  cus- 
tomer's address  as  confidential  infor- 
mation" (5/26/98).  But  now  Dialog  has 
a  new  owner,  Thomson  Corporation. 
Does  that  mean  equal,  better,  or  less 
privacy  protection? 

Secure  Communications  and 
Vendor-Side  Data  Holes 

Some  search  services  are  sensitive 
enough  to  confidentiality  issues  that  a 
secure  communications  channel  for 
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burned  when  it  offered  access  to  the 
P-Trak  database  containing  address 
and  telephone  listings  from  credit  bu- 
reau files  —  and  which  originally  in- 
cluded social  security  numbers  as 
well.  LEXIS  got  albt  of  negative  pub- 
licity —  even  though  other  vendors 
carried  the  same  material,  and  still  do, 
in  some  cases.  Lexis  purged  all  Social 
Security  numbers  and  issued  a  very 
clear  and  prominent  privacy  policy  at 
http://www.lexis-nexis.com/lncc/ 
general  /  privacy,  html . 

Dialog  made  an  early  mention  of  its 
policy  in  a  Chronolog  article  from  No- 
vember 1983:  "Because  we  are  con- 
cerned about  the  confidentiality  needs 
of  our  customers,  we  have  a  policy 
against  revealing  customer  identities" 
(Dialog  Chronolog,  File  410,  Accession 
No.  0001749).  In  apersonal  communi- 
cation, Dan  Wagner,  Dialog  CEO,  af- 
firmed, "You  have  our  assurance  that 
your  e-mail  address  will  NOT  ever  be 
distributed  to  anyone  outside  of  The 


online  searching  is  offered.  One  can 
search  using  SSL  (Secure  Sockets  Layer) 
on  a  number  of  search  services,  includ- 
ing DialogWeb,  STN  on  the  Web,  and 
IBM's  Intellectual  Properly  Network. 
However,  some  vendors  reserve  SSL 
solely  for  the  transmission  of  credit- 
card  information,  even  though  this 
might  allow  others  to  read  passwords 
and  session  contents. 

Recently  UC  Berkeley  graduate  stu- 
dent Richard  Fromm  detailed  his  ef- 
forts to  convince  eBay  to  encrypt 
passwords  in  an  interesting  Web  post- 
ing at  http://avocado.dhs.org/ebpd/: 
"The  pitfalls  of  sending  passwords  in 
the  clear  have  been  recognized  for 
many  years.  The  only  surprising  thing 
is  that  too  many  people  still  don't  take 
security  seriously  and  continue  to  re- 
peat the  same  mistakes  over  and  over 
again."  When  eBay  didn't  increase 
their  security  in  response,  Fromm 
states  that  he  wrote  an  eBay  password 
daemon  that  can  sniff  network  traffic 
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for  eBay  user  IDs  and  passwords.  (See 
Authentication  entries  in  "Tech  Talk" 
sidebar.)  This  daemon  program  is 
available  for  downloading  on  the  site, 
though  Fromm  disclaims  any  mali- 
cious or  illegal  use.  Perhaps  eBay  will 
have  implemented  increased  security 


number  of  sites  have  them  —  though 
they  may  require  some  searching  to 
find.  Once  found,  it's  important  to  read 
the  policy  carefully,  so  that  you  can  be 
sure  you  agree  with  it.  Some  privacy 
policies  can  be  unclear,  ambiguous, 
hard  to  understand,  or  may  refer  to  un- 
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of  communications  by  the  time  this 
article  is  published 

There  are  also  other  communica- 
tion security  issues.  Some  search  ser- 
vices promote  e-mail  delivery  of  search 
results,  billing,  and  account  informa- 
tion. Do  any  services  allow  you  to  re- 
quest encryption  for  these  e-mails? 

Of  course,  even  if  the  communica- 
tion channel  is  totally  secure,  the  vul- 
nerability of  your  confidential  infor- 
mation on  someone  else's  site  depends 
on  the  security  of  that  site.  Look  at  re- 
cent incidents  in  which  hackers  stole 
credit-card  information.  For  example, 
one  hacker  tried  to  extort  money  from 
CD  Universe  after  claiming  to  have 
stolen  300,000  credit-card  numbers  in 
January  2000.  John  Ryan,  CEO  of  en- 
cryption software  supplier  Entrust, 
said,  "This  wouldn't  have  happened  if 
the  data  had  been  encrypted"  (Dick 
Satran,  "NetTrends:  Devices  Add  to  Se- 
curity Challenge,"  Reuters,  1/19/2000). 

Privacy  Policy  Problems  — 
Read  Them  Early  and  Often 

Although  some  Web  sites  still  lack  a 
posted  privacy  policy,  an  increasing 


specified  relationships  with  unspecified 
companies.  You  may  also  need  to  read 
the  "Terms  and  Conditions,"  User/Sub- 
scriber/Service Agreements,  or  equiva- 
lents, since  these  may  modify  the  pri- 
vacy policy.  For  example,  the  privacy 
policy  at  one  Web  site  stated  clearly  that 
no  information  would  be  shared  with- 
out user  permission,  but  the  accompa- 
nying subscriber  agreement  declared 
that  by  subscribing,  users  automatically 
gave  permission  for  their  information 
to  be  shared.  [For  a  listing  and  analysis 
of  several  privacy  possibilities  (along 
with  the  companies'  response),  see  "A 
Surprise  in  Every  Package,"  Industry 
Standard,  March  13,  2000,  p.  208+ 
http://www.thestandard.com/arti- 
cle/display/0,1151,12453,00.html.] 

Regardless  of  the  current  wording  of 
the  privacy  policy  or  other  legal  no- 
tices, the  phrase  "changes  can  be  made 
at  any  time"  is  relatively  common  in 
these  agreements.  In  fact,  the  agree- 
ments often  state  that  these  changes 
may  be  made  without  notice.  Users 
must  regularly  check  the  notices  for 
updates  or  changes.  Here  is  one  exam- 
ple from  Amazon.com,  though  the 
company  did  add  an  "opt-out"  clause: 


"Amazon.com  does  not  sell,  trade,  or 
rent  your  personal  information  to  oth- 
ers. We  may  choose  to  do  so  in  the  fu- 
ture with  trustworthy  third  parties,  but 
you  can  tell  us  not  to  by  sending  a 
blank  e-mail  message  to  never@ama- 
zon.com. ...  If  we  decide  to  change  our 
privacy  policy,  we  will  post  those 
changes  on  this  page  so  that  you  are  al- 
ways aware  of  what  information  we 
collect,  how  we  use  it,  and  under  what 
circumstances  we  disclose  it"  [http:// 
www.amazon.com/exec/obidos/subst 
/  misc/ policy/ privacy.html  / 102- 
0375170-5013609]. 

Armand  Prieditis,  CEO  of  Uncon- 
ventional Wisdom,  has  developed  a 
number  of  questions  for  rating  privacy 
policies,  including  the  following:  Is  the 
policy  prominent  and  easily  accessible? 
Is  it  clear?  Is  it  short?  What  information 
is  collected?  Is  there  an  opt-out  choice 
available?  Is  there  provision  for  users  to 
make  changes,  updates,  or  deletion  to 
their  personal  data?  Is  there  a  contact 
given  at  the  company  for  questions  re- 
lating to  their  privacy  practices?  Is  there 
special  handing  for  information  about 
children?  [See  "Fourteen  Features  of  a 
Good  Privacy  Policy,"  Prieditis'  slide 
from  his  talk  at  the  Search  Engines  2000 
Conference,  athttp://www.infonortics. 
com/searchengines/shOO/prieditis_ 
files/frame.htm.] 

For  some  examples  of  relatively  con- 
sumer-oriented or  "privacy-friendly" 
policies,  see  those  of  Junkbusters 
[http://www.junkbusters.com/ht/en/ 
aboutus.html#policy]  and  Ralph  Nader 
for  President  [http:// www. votenader. 
com/privacyhtml].  Carol  Ebbinghouse 
reviewed  the  privacy  policies  of  many 
sites  that  searchers  care  about  ("Privacy: 
Another  Licensing  Issue,"  Searcher,  vol. 
7,  no.  2,  February  1999,  pp.  18+).  The 
Smart  Computing  Guide  to  PC  Privacy 
(vol.  8,  no.  4,  April  2000,  pp.  123-8)  carries 
a  list  synopsizing  the  privacy  policies  of 
the  50  most  popular  sites  [http: //www. 
smartcomputing.com/editorial/arti 
cle.  asp?article=articles  /  archive  /  g0804  / 
45g04/45g04.asp&guid=bcecpkl0] . 

A  number  of  other  reviews  of  privacy 
policies  are  available,  but,  caveat  surfer 
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—  we  recommend  that  you  check  the 
current  information  of  any  given  site 
and,  if  you  use  the  site  frequently,  keep 
checking  the  policies  regularly. 

In  an  effort  to  mitigate  the  necessity 
for  reading  multiple,  often  confusing, 
privacy  policies,  The  World  Wide  Web 
Consortium  [http://W3c.org]  is  devel- 
oping the  Platform  for  Privacy  Prefer- 
ences (P3P)  [http://www.w3.org/P3P/]. 
Due  out  in  the  summer  of  2000,  P3P  will 
enable  users  to  choose  their  own  pref- 
erences concerning  the  kind  and  quan- 
tity of  information  they  are  willing  to 
provide.  Users  will  be  warned  when 
they  surf  a  site  which  has  a  privacy  pol- 
icy that  goes  beyond  their  pre-set  pri- 
vacy limits.  At  this  writing  Microsoft  has 
just  promised  to  provide  free  Internet 
tools  for  P3P  in  the  fall  of  2000.  How- 
ever, P3P  is  the  subject  of  some  contro- 
versy. Some  critics  feel  that  there  are  in- 
sufficient incentives  for  Web  sites  to 
enroll  in  the  program.  Junkbusters 
president  Jason  Cadett  said  that  wide 
adoption  remains  years  away  {The New 
York  Times,  4/7/2000).  Cadett  said  that 
companies  are  using  P3P  as  "an  excuse 
to  use  in  their  lobbying  against  en- 
forceable privacy  rights  for  the  Ameri- 
can consumer:  a  Pretext  for  Privacy 
Procrastination"  [http://www.cfp2000. 
org/papers/cadett.pdf]. 

Even  if  you  approve  a  site's  privacy 
policy,  what  assurance  do  you  have 
that  the  site  will  actually  comply  with 
its  posted  policy?  A  recent  study  by  the 
California  Healthcare  Foundation  al- 
leges that  a  number  of  health  care  Web 
sites  shared  personal  consumer  health 
information  with  other  sites  in  viola- 
tion of  its  own  privacy  policies.  The 
Federal  Trade  Commission  has  been 
asked  to  review  these  charges.  [For 
more  information  see  http://ehealth. 
chcf.org/index_show.cfm?doc_id=34.] 

Privacy  Seals  —  Good 
Housekeeping? 

A  number  of  online  privacy  seals 
have  been  established  in  an  attempt  to 
reassure  consumers  about  often  con- 


fusing privacy  policy  provisions.  These 
seals  include  TRUSTe,  CPAWebTrust, 
BBBOnline,  and  SecureAssure.  All  of 
these  seals  set  standards  that  partici- 
pating sites  must  meet.  [For  details, 
check  http:  /  /  www.truste.com/,  http:  /  / 
www.cpawebtrust.com/,  http:/ /www. 
bbbonline.org/businesses/privacy/in- 
dex.html,  and  http://www.secureas- 
sure.org/.]  Note  that  sites  bearing  the 
same  privacy  seal  may  have  substan- 


tially different  privacy  policies,  so  you 
still  need  to  read  the  privacy  policy  and 
other  agreements. 

Critics  charge  that  an  inherent  con- 
flict of  interest  exists  with  certificate 
programs  subsidized  by  fees  from  par- 
ticipating sites.  They  also  charge  them 
with  a  lack  of  enforcement  actions.  The 
programs  seldom  withdraw  the  seals, 
even  for  flagrant  violations.  TRUSTe  in 
particular  has  been  called  an  attempt  by 
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Several  recently  published  books  illuminate  some  of  the  trends, 
policies,  and  technologies  involved  in  the  greater  privacy  issues  of 
our  society. 

Much  of  the  current  struggle  for  privacy  is  rooted  in  the  modern  mar- 
keting industry.  Douglas  Rushkoff's  disturbing  book,  Coercion — WhyWe 
Listen  to  What 'They' Say  [Riverhead  Books,  1999, 1-57322-115-5],  re- 
peals the  current  tricks  of  the  trade.  Discussing  salesmen's  scripts  and 
the  techniques  of  cults,  Rushkoff  shows  how  far  marketing  has  come 
since  the  1957  publication  of  Vance  Packard's  best-seliing  The  Hidden 
Persuaders.  Rushkoff  writes  about  various  manipulative  tools,  including 
visual  and  scent  cues,  shopping  center  design,  multilevel  marketing 
groups  and  various  kinds  of  advertising.  Interviews  with  sales  and  adver- 
tising professionals,  telemarketers,  and  consumers  complete  the  picture. 

Rushkoff  writes,  "Corporations  and  consumers  are  in  a  coercive  arms 
race.  Every  effort  we  make  to  regain  authority  over  our  actions  is  met  by 
an  even  greater  effort  to  usurp  it."  This  arms  race  is  certainly  reflected 
in  current  online  privacy  issues  and  technologies. 

Rushkoff's  definitions  address  the  balance  between  privacy  and  go- 
ing too  far:  "Persuasion  is  simply  an  attempt  to  steer  someone's  think- 
ing by  using  logic.  Influence  is  the  act  of  applying  readily  discernible 
pressure:  I  want  you  to  do  this;  I  have  power  over  you,  so  do  it.  Coercion 
seeks  to  stymie  our  rational  processes  in  order  to  make  us  act  against  — 
or,  at  the  very  least,  without  —  our  better  judgment." 

This  underscores  the  importance  of  permission-based  "opt-in"  mar- 
keting. We  may  well  feel  that  we  are  being  coerced  when  our  information 
is  taken  online  without  our  knowledge  and  used  to  manipulate  us  and 
convince  us  to  buy. 

David  Brin's  The  Transparent  Society  —  Will  Technology  Force 
Us  to  Choose  Between  Privacy  and  Freedom?  [Addison-Wesley, 
1998,  0-201 -32802 -X]  offers  erudite  and  compelling  arguments  for 
the  ultimate  of  "Sunshine  Laws":  a  city  of  glass  houses  governed  by 
mutual  accountability. 

Brin  says  that  surveillance  technology  will  soon  be  everywhere,  re- 
sulting in  an  inevitable  loss  of  privacy.  The  biggest  danger  is  that  too  few 
people  will  watch.  Brin  advocates  "reciprocal  transparency"  —  an  open 
society  in  which  everyone  has  access  to  the  same  information  about  every- 
one else.  It's  a  challenging  and  often  fascinating  book,  with  eclectic  philo- 
sophical, historic,  and  technological  discussions  and  examples  and  is 
well  worth  reading. 

Many  of  Brin's  points  are  echoed  elsewhere.  Nobel  Laureate  Arno  Pen- 
zias,  author  of  Ideas  and  Information,  recently  said  that  our  current  "ur- 
ban anonymity"  is  a  historical  anomaly.  Our  origins  began  in  small  vil- 
lages where  everyone  knew  everything  about  each  other;  and  in  the  near 
future  everything  will  again  be  known  with  everyone's  online  data  trails 
stored  in  computer  databases  [James  Fallows,  "Frontier  Days,"  Theln- 
dustry  Standard,  11/14/99,  http://www.thestandard.com/article/dis 
play/0,1 151, 7618.00.html]. 

As  a  scientist  and  science-fiction  author,  Brin's  technology  predic- 
tions regarding  ubiquitous  surveillance  certainly  seem  accurate.  Improved 
surveillance  and  pattern  recognition  systems  were  recently  installed  to 
protect  the  Las  Vegas  Mirage  Resort  from  casino  cheaters  [http://www. 
viisage.com/March29_2000.htm].  Mitsubishi's  struggles  to  market  a  new 
accident-recording  car  camera,  along  with  additional  possible  applica- 


tions (on  police  guns,  in  elevators,  and  on  school  kids'  jackets  to  protect 
them  from  bullies)  are  discussed  in  Robert  Buderi's  article  "Great  Idea, 
Tough  Sell"  [Upside,  2/28/2000,  http://www.upside.com/texis/mvm/story 
?id=38b6dea80]. 

Speaking  directly  to  online  anonymity,  Brin  predicts,  "So  you  use 
anonymous  remailers  to  reconvey  all  your  messages,  so  that  nobody  (ex- 
cept the  remailer  owner)  can  trace  your  identity?  Better  be  careful.  Ex- 
perts at  linguistic  analysis  are  developing  effective  ways  to  appraise  and 
detect  spelling  and  grammar  patterns  that  are  unique  to  each  individ- 
ual"^. 287). 

Journalist  and  computer  security  expert  Simson  Garfinkel's  Database 
Nation  —  The  Death  of  Privacy  in  the  21st  Century  [O'Reilly,  2000,  1- 
56592-653-6]  offers  an  entertaining,  frightening,  and  absorbing  account 
of  how  our  lives  may  be  affected  by  the  increasing  loss  of  privacy  in  the 
near  future.  Garfinkel  lists  numerous  current  threats  to  privacy,  includ- 
ing the  end  of  due  process,  biometrics,  misuse  of  medical  and  genetic 
information,  systematic  capture  of  everyday  events  and  data,  runaway 
marketing,  and  commodification  of  personal  information.  The  book  has 
real  strengths  in  its  breadth  of  coverage  and  depth  of  detail  describing 
the  history  and  technologies  involved.  More  information  is  available,  as 
well  as  the  full  text  of  the  chapter  on  medical  records,  at  http://www.data- 
basenation.com. 

Garfinkel  tells  stories  of  real  people  suffering  from  present-day  pri- 
vacy breaches  and  extrapolates  a  chilling  future  of  disappearing  privacy. 
But  these  are  really  cautionary  tales,  wake-up  calls  meant  to  alert  the 
reader  and  prevent  the  outcome  before  it's  too  late.  Publisher  O'Reilly 
compares  Database  Nation  to  Rachel  Carson's  historic  Silent  Spring, 
which  helped  launch  the  environmental  movement  of  the  '60s. 

Garfinkel  similarly  argues  for  a  government  role  in  preventing  indus- 
try encroachment  on  individual  rights.  In  a  recent  interview,  he  said  that 
industry  self-regulation  hasn't  worked  in  the  past  [The  Pizzo  Files, 
4/27/2000,  http://www.oreillynet.eom/pub/a/network/2000/04/27/gar 
f  inkel/index.html]:  "We  tried  using  the  marketplace  to  regulate  the  chem- 
ical industry  in  the  1950s,  and  the  result  was  that  we  killed  a  lot  of 
species,  we  polluted  rivers,  and  the  air  was  unbreathable  in  many  cities. 
The  marketplace  doesn't  regulate  issues  when  there  are  externalities.  You 
need  to  have  regulation  so  that  companies  are  forced  to  bear  the  brunt 
of  what  they  throw  onto  society.  And  privacy  is  very  much  like  that." 

Garfinkel  continued  with  particular  relevance  for  information  profes- 
sionals: "...most  people  in  our  society  are  not  really  well-versed  enough 
to  protect  their  privacy  by  making  informed  decisions,  just  as  they  aren't 
really  well  versed  enough  to  protect  their  health  by  reading  the  ingredi- 
ents and  deciding  if  a  particular  ingredient  on  a  bottle  is  known  to  cause 
cancer  or  not.  Instead  what  we  do  is  we  have  a  law  that  says  if  a  sub- 
stance is  known  to  cause  cancer  you  can't  put  it  in  the  food  supply.  But 
we  don't  have  rules  right  now  that  say  if  a  product  is  known  to  cause  pri- 
vacy problems  you  can't  put  it  in  the  information  industry." 

Perhaps  it's  time  that  information  professionals  learned  about 
the  wider  privacy  implications  of  current  industry  practices  and 
joined  in  efforts  to  preserve  what  privacy  is  necessary  for  the  prac- 
tice of  our  profession.  Database  Nation  —  The  Death  of  Privacy  in 
the 21st  Century  is  an  important  book,  worth  reading,  and  a  partial 
inspiration  for  this  article. 
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industry  to  avoid  government  oversight, 
and  that  it  "...proves  industry  self- reg- 
ulation on  privacy  won't  work"  {Indus- 
try Standard,  March  20,  2000,  p.  168). 

Independent  third-party  certifica- 
don  could  be  very  useful  in  promoting 
consumer  trust,  especially  regarding 
sensitive  issues.  One  particularly  use- 
ful application  might  lie  in  guarantee- 
ing site  security  against  hacker  attacks, 
since  companies  are  understandably 
reluctant  to  detail  security  arrange- 
ments openly  on  their  Web  sites. 


The  Role  Of  Government  — 

Laws  and  Regulations 

The  greatest  dangers  to  liberty  lurk 
in  insidious  encroachment  by  men  of 
zeal,  well-meaning,  but  without  un- 
derstanding. 

—  Supreme  Court  Justice  Louis 
Brandeis,  the  leading  advocate  of  the 
legal  right  to  privacy  in  the  U.S. 

Some  consider  government  and  law 
enforcement  a  bigger  danger  to  per- 
sonal privacy  than  corporations, 
though  this  may  not  necessarily  apply 
to  the  privacy  concerns  of  information 
professionals.  Certainly  the  role  of  the 
government  is  easily  one  of  the  more 
controversial  points  in  any  discussion 
on  the  subject  of  privacy.  Here  are  some 
very  brief  notes  on  recent  items  of  in- 
terest to  information  professionals. 

The  FBI,  SEC,  and  FTC  have  all  re- 
cently announced  Web  investigation 
initiatives,  each  in  its  respective 
spheres.  The  FBI  and  Department  of 
Justice  requested  widespread  surveil- 
lance powers  and  the  budget  to  link 
many  private  and  public  databases  and 
to  buy  new  data-mining  tools.  "If  there 
is  going  to  be  a  Big  Brother,  it  is  us,  the 
FBI,"  said  FBI  Supervisory  Special 
Agent  Paul  George.  Putting  this  remark 
in  context,  George  also  said,  "There  are 
reasons  law  enforcement  should  and 
does  have  the  power  to  arrest  and 
search....  There  are  worse  things  than 
having  your  privacy  violated  —  like 
murder.  I  don't  know  how  [others]  can 
say  that  there  is  no  price  to  privacy  or 


price  to  security  in  this  equation.  In  or- 
der to  prevent  crime,  information  has 
to  be  collected ...  if  justified." 

Junkbusters'  Jason  Catlett  responded 
that  without  proper  regulations  about 
when  and  how  data  can  be  collected, 
such  an  assertion  makes  everyone  a 
suspect.  Catlett  continued,  "It's  like  they 
are  saying  that  we  have  a  lot  of  robbers, 
so  in  order  to  protect  the  banks  — 


rather  than  make  them  more  secure  — 
they  are  requiring  the  identity  of  every- 
one who  walks  in  front  of  banks"  (ZD- 
Net  News,  4/6/2000). 

The  SEC  has  proposed  to  monitor 
Web  activities  involving  investment  of- 
fers that  provide  false  or  misleading  in- 
formation, claims  of  "inside"  informa- 
tion, and  other  fraud-related  behavior. 
The  plan  has  elicited  some  controversy, 
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since  the  SEC  intends  to  unmask 
anonymous  message  posters,  and 
some  object  on  constitutional  grounds 
{The  Wall  Street  Journal,  3/28/2000). 
The  Federal  Trade  Commission  also 
plans  to  protect  privacy  by  investigat- 
ing Web  site  practices  relating  to  the 
gathering  of  personal  information. 

Congress  is  involved  in  a  number  of 
investigations  of  Internet  privacy  issues 
with  legislation  on  the  subject  expected 
either  this  year  or  next.  The  adminis- 
tration has  long  been  a  proponent  of  in- 
dustry self- regulation,  but  privacy  is  an 
issue  with  strong  popular  support,  and 
this  is  an  election  year,  so  there  may 
well  be  changes  ahead. 

The  administration  has  recently  re- 
laxed its  prohibition  on  the  exporta- 
tion or  use  of  strong  encryption  by 
U.S.  citizens  outside  the  US.  This  may 
have  direct  consequences  for  infor- 
mation professionals  in  multinational 
companies  and  those  doing  business 
with  foreign  companies,  permitting 
additional  options  in  cryptography 
software.  However,  the  administration 
continues  to  back  law  enforcement  re- 
quests for  encryption  "back  doors"  and 
electronic  communication  eavesdrop- 
ping capabilities. 

The  existence  of  the  long-suspected 
international  electronic  communica- 
tions interception  network,  Echelon, 
was  recently  confirmed  from  docu- 
ments obtained  under  FOIA  by  Na- 
tional Security  Archive  senior  fellow 
Jeffrey  Richelson.  However,  despite  the 
fears  of  number  of  organizations  —  in- 
cluding the  government  of  France  — 
that  Echelon  was  used  for  industrial  es- 
pionage, Richelson  said,  "My  research 
suggests  that  it's  much  more  limited 
than  the  extreme  cases  make  out" 
[http://www.jy\nredxom/news/poli 
tics/0, 1283,34932,00.html].  In  a  telling 
point  for  information  professionals, 
Richelson  contended  that  the  National 
Security  Agency  is  overwhelmed  by 
the  amount  of  information  on  the  In- 
ternet, and  "its  ability  to  collect  and 
process  information  is  not  nearly  as 
immense  as  some  of  these  accounts 
make  it  out  to  be. . . .  This  agency  is  not 
doing  all  that  well  against  the  new  in- 
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formation  technology"  (The  New  York 
Times,  2/24/2000). 

The  European  Union  and  the  U.S. 
have  come  to  a  tentative  agreement  on 
"safe-harbor"  provisions  under  which 
U.S.  companies  will  protect  the  privacy 
of  European  Internet  shoppers.  The  EU 
had  threatened  to  stop  doing  business 
with  the  U.S.  unless  more  was  done  to 
protect  EU  citizens'  legal  right  to  pri- 
vacy. The  U.S.  and  the  EU  had  agreed 
to  these  rights  in  the  1980  Guidelines 
Governing  the  Protection  of  Privacy  and 
Transborder  Flows  of  Personal  Data 
[http://www.oecd.org/dsti/sti/it/ 
secur/prod/PRTV-EN.HTM] ,  often  seen 
as  a  basic  guide  to  privacy  and  fair  in- 
formation practices. 

It  appears  that  "opt-in"  permission 
from  EU  citizens  will  be  required  be- 
fore their  information  is  transferred  or 
sold,  and  U.S.  companies  could  be 
prosecuted  under  criminal  law  for  any 
lapses  (Financial  Times,  2/23/2000). 
This  agreement  is  worth  monitoring, 
since  it  could  eventually  have  broader 
implications  for  information  profes- 
sionals and  U.S.  citizens  as  well,  who 
might  ask,  "Why  do  they  get  rights  we 
don't?" —  especially  in  an  election  year. 

The  new  Children's  Online  Privacy 
Protection  Act  (CJDPPA),  effective  as  of 
4/21/2000,  is  one  of  the  few  explicit 
privacy  laws  in  the  U.S.;  it  requires  that 
parental  permission  be  obtained  be- 
fore information  is  gathered  on  chil- 
dren younger  than  13.  FTC  attorney 
Loren  G.  Thompson  said,  "It's  a  high 
priority  for  the  agency  ...  we  will  be 
enforcing  this  law  and  looking  at  vio- 
lators closely."  The  FTC  will  check  Web 
sites  at  random  for  compliance;  each 
violation  could  cost  operators  $  1 1 ,000 
(The  New  York  Times,  4/21/2000). 
However,  COPPA  was  based  on  the 
FTC's  1996  privacy  rules,  and  it  does- 
n't address  possibilities  available  with 
current  technology,  such  as  Net-capa- 
ble cell  phones  or  PDAs. 

Critics  also  say  that  COPPA  may  have 
unintended  consequences.  Parry  Aftab, 
of  the  online  privacy  firm  CyberAngels, 
estimated  the  cost  of  COPPA  compli- 
ance at  $60,000  to  $100,000  per  site  [The 
New  York  Times,  5/12/2000,  http:// 


www.nytimes.com/library/tech/00/ 
05/cyber/articles/ 12coppa.html].  A 
number  of  children's  sites,  including 
Thomas  the  Tank  Engine,  Ecrush, 
and  NCBi,  have  suspended  e-mail 
newsletters  to  avoid  violating  COPPA 
—  thus  disappointing  their  young 
fans  [Wired jjews,  5/ 13/2000,  http:// 
www.wired.com/news/politics/ 
0,1283,36325,00.html]. 

ISPs  and  Subpoena  Power  — 
Big  Brother's  Best  Buddy 

All  of  a  surfer's  behavior  and  mes- 
sages can  easily  be  tracked  at  the  ISP 
(Internet  Service  Provider)  level.  Pre- 
dictive Networks  [http://www.pre 
dictivenetworks.com]  is  attempting 
to  harvest  that  data  by  offering  sub- 
scribers lower-cost  surfing  in  ex- 
change, with  personalized  ads  and 
content.  However,  note  that  sub- 
scribers clearly  must  opt-in  to  the 
program,  unlike  other,  less-obvious 
monitoring  programs. 

In  1998,  FBI  director  Louis  Freeh 
told  Congress  that  he  would  like  to  re- 
quire that  ISPs  keep  records  of  user  IP 
addresses  and  screen  names.  Law  en- 
forcers could  then  obtain  this  infor- 
mation by  subpoena  if  necessary. 

Of  course,  others  could  also  sub- 
poena ISPs  for  this  information,  and 
this  power  offers  a  major  threat  to  on- 
line anonymity  —  and  thus  to  free 
speech,  some  say.  Ironically,  the  Orange 
County  Register  newspaper  has  been 
accused  of  using  a  subpoena  to  remove 
a  critic's  anonymity  (The  New  York 
Times,  7/24/98).  In  another  case,  an 
anonymous  employee  claims  that  he 
was  dismissed  from  his  job  after  he  had 
criticized  his  employer,  who  then  used 
a  subpoena  to  discover  his  identity 
(Cleveland  Plain  Dealer,  4/1 1/2000). 

Often  ISPs  have  little  incentive  to 
fight  subpoenas  and  may  not  even  al- 
low their  subscribers  sufficient  time 
or  notice  to  do  so  either.  As  noted 
elsewhere,  this  subpoena  power  can 
also  have  significant  implications  for 
information  professionals,  possibly 
enabling  full  identity  and  query  dis- 
closure. Concerns  over  such  vulnera- 


bility could  push  users  toward  systems 
such  as  Zero  Knowledge's  Freedom, 
which  is  essentially  exempt  from  sub- 
poena disclosure  since  no  record  is 
kept  of  user  IDs. 

Database  Mining 
and  User  Profiling 

Some  of  the  techniques  involved  in 
database  mining  and  user  profiling  are 
very  familiar  to  information  profes- 
sionals. Indexing  and  categorization  are 
our  stock  in  trade,  and  of  course  so  is 
"the  dossier  effect" — building  a  mosaic 
of  information  around  a  particular  sub- 
ject or  person  through  which  the  edu- 
cated eye  can  infer  implicit  additional 
information.  And  the  Internet  can  cer- 
tainly supply  a  lot  of  information — per- 
haps more  than  ever  before.  As  Ian 
Goldberg  of  Zero -Knowledge  Systems 
said,  "Eveiything  that  can  be  linked  to- 
gether will  be"  ("Stay  Anonymous  IfYou 
Want  to  Stay  Unnetted,"  Karlin  Lilling- 
ton,  Irish  Times,  2/18/2000,  p.  61). 

When  collaborative  filtering  and 
predictive  modeling  are  performed  on 
huge  amounts  of  warehoused  data, 
the  effect  can  really  call  for  a  new  look 
at  the  question,  "What  is  personally 
identifying  information  anyway?"  To- 
day marketers  integrate  census  data 
with  many  other  information  sources. 
This  is  one  reason  why  there  was  such 
a  reaction  to  Doubleclick's  proposed 
mining  of  Abacus  data  for  profiling. 

Powerful  data  mining,  profiling,  and 
predictive  tools  developed  for  the  mar- 
keting industry  could  also  be  applied 
to  competitive  intelligence  purposes. 
All  the  information  traffic  to  and  from 
a  particular  site  could  be  sniffed  and 
then  stored  in  a  huge  database  for 
analysis,  threading,  deconstruction, 
etc.  Or  at  least  it  could  be  analyzed 
eventually,  no  doubt  when  sufficiently 
capable  tools  are  available.  Remember, 
when  Alexa_ captured  a  2-terabyte 
snapshot  of  the  entire  Web  in  1997  and 
presented  a  copy  to  the  Library  of  Con- 
gress, the  archive  was  not  very  search- 
able, due  to  technology  limitations. 

It  may  be  difficult  to  interpret  infor- 
mation taken  out  of  context.  When  a 
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Tech  Talk  on  Privacy 

Here  are  brief  explanations  of  some  of  the  more  technical  aspects 
of  Internet  communication  technologies  and  software  and  their  bear- 
ing on  privacy  issues.  Some  additional  resources  are  listed  below,  in- 
cluding a  number  of  references  to  specific  chapters  in  the  useful  pub- 
Jication  Smart  Computing  Guide  to  PC  Privacy  [vol.  8,  no.  4,  April 
2000,  abbreviated  here  as  SCGPP,  with  complete  table  of  contents 
available  at  http://www.smartcomputing.com/editorial/stoc. asp?guid= 
mne9hwm4&vol=8&iss=4&type=4]. 

Environment  Variables  are  bits  of  data  captured  by  the  server  about 
your  Web  browser.  The  information  these  variables  contain  includes 
the  network  (or  IP)  address  of  your  computer,  the  username  you  are 
currently  using  to  log  into  the  server,  the  type  of  computer  and  browser 
you  use,  any  Cookies  set  on  your  computer  for  the  site  you  are  brows- 
ing, the  name  of  the  Web  page  you  are  requesting,  and  the  address 
of  the  last  page  you  requested.  This  means  that  if  you  traveled  from 
Microsoft.com  to  Netscape.com,  Netscape  can  tell  that  you  have  come 
from  the  Microsoft.com  site.  See  more  details  at  SCGPP's  "Under- 
standing IP  Addresses." 

HTTPS  and  SSL  are  semi-interchangeable  terms  used  to  describe 
the  current  standard  in  Web  encryption.  HTTPS  refers  to  the  standard 
Web  connection  protocol  HTTP  with  the  addition  of  the  SSL  (Secure 
Sockets  Layer)  encryption  method.  SSL  can  encrypt  data  using  a  va- 
riety of  key-lengths,  including  128-bit  keys  in  North  American  and 
56-bit  keys  in  Europe  and  Asia.  You  can  feel  reasonably  assured  when 
using  an  SSL  encrypted  site  that  the  data  sent  to  and  from  your  Web 
browser  is  secure.  SSL  uses  a  trusted  third-party  authority,  known  as 
a  Certificate  Authority,  to  verify  that  you  are  communicating  with  a 
trusted  site.  The  Certificate  Authority  is  responsible  for  issuing  cer- 
tificates only  to  companies  that  can  prove  their  identity.  You  can  con- 
firm that  you  are  communicating  with  the  correct  site  by  clicking  on 
the  Security  button  within  Netscape  or  by  selecting  Certificates  from 
within  the  Internet  Properties  of  Microsoft's  Internet  Explorer.  For 
more  information,  see  SCGPP's  "What  Is  SSL  &  How  Does  It  Work?" 

On  the  Internet,  there  are  two  primary  methods  for  user  Au- 
thentication, which  is  how  you  tell  the  server  you  are  accessing 
who  you  are.  These  methods  are  Session  Authentication  and  Ap- 
plication-Level Authentication  and  usually  differ  in  how  your  login 
information  is  requested. 

The  Session  Authentication  method  uses  the  browser's  built-in 
username  and  password  mechanism:  A  pop-up  dialog  appears  ask- 
ing for  your  username  and  password  for  the  site  you  are  accessing,  or 
possibly  for  a  realm  within  that  site.  Some  browsers  will  also  ask  if 
you  would  like  them  to  remember  your  username  and  password  for 
future  visits.  Although  your  user  information  is  stored  in  a  file  on  your 
hard  disk,  these  files  are  different  from  Cookies  and  cannot  be  ac- 
cessed in  the  same  manner.  Once  you  have  entered  your  username 
and  password,  both  are  weakly  encrypted  using  the  Base64  algorithm 
and  forwarded  to  the  server  for  each  successive  request  within  the  se- 
cured area  of  the  site.  This  makes  the  Session  Authentication  method 
more  secure  than  Application-Level  Authentication;  but  if  HTTPS  is 
used  with  either  authentication  method,  then  both  are  equally  secure. 

Application-Level  Authentication  is  an  increasingly  popular 
method  for  managing  user  logins.  Application-Level  Authenticated 
sites  tend  to  use  standard  Web  forms  to  capture  your  authentica- 


tion data,  such  as  username  and  password.  This  data  goes  to  the 
server  as  unencrypted  clear  text,  unless  you  have  used  HTTPS.  It's 
important  to  note  that  Application-Level  Authentication  relies  on 
Cookies  to  verify  a  user's  identity  once  he  or  she  has  logged  onto 
a  site.  So  Cookie  Management  solutions  will  only  work  with  Appli- 
cation-Level Authenticated  sites. 

Cookies  are  bits  of  data  that  Web  sites  can  store  on  your  computer 
for  a  pre-determined  period  of  time.  There  are  two  types  of  Cookies 
that  Web  developers  can  use:  persistent  and  non-persistent.  Non-per- 
sistent Cookies  store  temporary  data  on  your  browser,  contain  infor- 
mation particular  to  your  current  user  session,  and  are  destroyed  when 
you  quit  your  browser  application.  Persistent  Cookies  are  set  by  the 
server  along  with  an  expiration  date  and  stored  on  your  browser  until 
the  expiration  date  is  past,  at  which  point  the  Cookie  is  overwritten 
by  a  new  Cookie  set  by  the  same  site,  or  the  user  deletes  the  Cookie. 

Cookies  can  usually  only  be  retrieved  by  the  Web  site  that  set  them. 
The  Web  site  developer  may  choose  to  encrypt  Cookies.  However,  en- 
cryption only  provides  some  anonymity  for  your  Cookie  Jar.  Though 
the  content  of  the  Cookie  itself  cannot  be  determined,  the  URL  of  the 
site  for  which  it  is  valid  is  available  in  clear  text.  For  a  detailed  spec- 
ification about  Cookies,  go  to  Cookie  Central  [http://www.cookie 
central.com],  or  read  SCGPP's  "Cookie  Crumb  Trails." 

There  are  a  few  choices  for  managing  your  Cookies.  The  Cookie 
management  software  that  came  bundled  with  your  computer  gives 
you  three  options:  Allow  all  Cookies,  Disallow  all  Cookies,  or  Ask  be- 
fore setting  each  Cookie.  There  are  disadvantages  to  disallowing  all 
Cookies  sent  to  your  computer.  You  then  eliminate  the  non-persistent 
Cookies,  allowing  Web  applications  to  set  session  variables,  which 
may  affect  your  ability  to  log  into  some  secured  sites. 

Cookie  Management  software  can  allow  you  a  greater  level  of  gran- 
ular control  over  the  Cookies  that  your  browser  accepts  or  rejects. 
Many  versions  of  this  software  can  automatically  deny  Cookies  from 
specific  sites  while  allowing  them  for  other,  trusted  sites.  These  pack- 
ages allow  you  to  take  advantage  of  the  personalization  features  of 
sites  such  as  Amazon.com  [http://www.amazon.com]  or  Dow  Jones 
Interactive  [http://www.djinteractive.com],  while  denying  the  poten- 
tial privacy  risks  of  online  advertising  companies  such  as  Doubleclick 
[http://www.doubleclick.com].  For  more  information,  check  some  of 
the  sites  mentioned  in  the  "Privacy  Resources"  sidebar  and  SCGPP's 
"Control  Your  Cookie  Consumption." 

Some  security-conscious  users  also  disable  ActiveX,  Java,  and 
JavaScript  on  their  browsers  to  avoid  possible  privacy  violations.  The 
disadvantage  is  that  then  you  can't  view  Java-enabled  sites  with  these 
browsers.  As  an  alternative,  you  might  try  running  several  browsers  or 
versions  of  browsers,  with  different  capabilities  enabled.  More  infor- 
mation appears  at  SCGPP's  "Preventing  Possible  Web  Intrusions." 

Recently  there  has  been  a  lot  of  concern  over  the  use  of  Clear 
GIFs  as  a  way  to  violate  a  browser's  anonymity.  GIF  stands  for  the 
Graphics  Interchange  Format,  a  graphics  file  format  invented  by 
CompuServe  to  allow  its  users  to  view  the  graphics  and  online  im- 
ages of  other  users.  While  GIF  has  slowly  been  pushed  from  the 
Web  imaging  world  by  the  PNG  (portable  network  graphics)  and 
JPEG  (joint  picture  experts  group)  formats,  it  is  still  viewable  within 
most  Web  browsers. 
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The  way  a  Clear,  or  single  pixel,  GIF  works  is  very  similar  to  the 
monitoring  methods  used  by  online  advertising  agencies.  A  par- 
ticular Web  page  has  an  embedded  image  URL  that  references  a 
GIF  on  another  server.  That  second  server  then  has  access  to  the 
information  passed  by  users  visiting  the  first  Web  site.  For  more 
detailed  information  about  Clear  GIFs,  see  SCGPP's  "Beware  of 
Web  Bugs  &  Clear  GIFs." 

Even  more  frightening  than  Clear  GIFs  is  the  concept  of  Mali- 
cious Code.  Malicious  Code  on  the  Internet  is  probably  one  of  the 
single  biggest  threats  to  user  online  privacy.  It  most  easily  com- 
pares to  a  computer  virus,  like  the  LoveBug  virus  that  hit  the  In- 
ternet on  May  4,  2000.  It  was  written  using  VBScript,  which  can 
run  not  only  in  Microsoft's  Exchange  software  but  in  Microsoft's 
Internet  Explorer  software  as  well.  Once  your  browser  is  infected, 
Malicious  Code  could  also  track  your  visits  to  various  Web  sites 
over  the  course  of  a  session.  For  more  information,  see  SCGPP's 
"Keep  It  Sealed"  and  "When  Viruses  Attack." 

A  Network  Sniffer  is  a  computing  device,  either  hardware  or  soft- 
ware, that  can  analyze  the  packets  of  data  traveling  over  a  computer 
network.  Sniffers,  as  the  devices  are  often  called,  can  capture  traf- 
fic using  a  variety  of  filters,  including  all  the  traffic  originating  on  a 
given  browser,  all  the  traffic  traveling  between  a  given  browser  and 
a  specified  server,  or  all  the  traffic  received  by  a  specified  server. 
Once  this  traffic  has  been  captured,  it  is  fairly  straightforward  to  view 
the  contents  of  the  traffic.  In  fact,  most  packet  analysis  software  will 
even  decode  common  encoding  formats  such  as  Base64. 

By  definition,  a  Proxy  is  the  authority  or  power  to  act  on  another's 
behalf;  this  is  true  on  the  Internet  as  well.  A  proxy  is  used  to  repack- 
age a  request  from  a  browser  for  a  given  site  to  appear  as  though  the 
package  is  coming  from  the  proxy  itself.  At  the  same  time  a  proxy 
can  filter  the  content  returned  to  the  browser  as  well.  Several  varia- 
tions on  the  Proxy  server  exist  that  allow  you  to  Manage  Cookies, 
block  advertising,  and  limit  certain  types  of  data  from  being  sent  to 
your  browser.  For  information  on  specific  proxies  and  associated  is- 
sues, check  out  ProxyMate  [http://www.lpwa.com],  the  Internet  Junk 
Buster  [internet.junkbuster.com],  the  Department  of  Defense's  Onion 
Router  project  [http://www.onion-router.net],  Anonym izer  [http:// 
www.anonymizer.com],  or  Zero  Knowledge  System's  Freedom 
[http://www.freedom.net].  You  can  test  your  Web  anonymity  at  vari- 
ous sites,  including  Richard  Smith's  Test  Page  for  Web  Anonymizing 
Services  [http://www.tiac.net/users/smiths/anon/test.htm  and  http:// 
www.anonymizer.com/3.0/index.shtml],  clicking  on  "Who  are  you?" 

Like  shareware  and  freeware  programs,  Sponsored  Software  is 
free  to  download  and  appears  to  have  little  or  no  cost.  In  lieu  of  pay- 
ing for  the  use  of  the  commercial-quality  software,  such  as  Qual- 
comm's  Eudora  [http://www.eudora.com],  you  may  be  able  to  run  the 
program  if  you  will  agree  to  view  advertisements.  Many  of  these  soft- 
ware publishers  use  software  by  companies  such  as  Radiate  (formerly 
Aureate  Media)  that  can  display  ads  on  your  computer  even  when 
you're  not  surfing  the  Web.  Using  sponsored  software,  which  still  re- 
quires a  connection  through  your  ISP  or  company,  is  all  that  is 
needed.  Since  this  software  can  report  information  about  your  habits, 
it  has  also  been  called  an  "adbof'or  "spyware."  Recently  questions 
have  arisen  as  to  whether  the  Radiate  software  can  collect  other  in- 
formation about  your  computer  or  your  surfing  habits  even  while  you 
aren't  using  the  sponsored  software,  but  studies  performed  using  a 
Sniffer  [http://kumite.com/myths/myths/myth036.htm]  have  proven 
this  to  be  untrue. 


The  Web  isn't  the  only  way  that  people  communicate  over  the  In- 
ternet; most  people  also  use  E-Mail.  Remember  that  sending  E-Mail 
is  roughly  analogous  to  sending  a  postcard  using  the  traditional  postal 
system.  Neither  type  of  message  has  its  privacy  guaranteed.  The  mes- 
sage is  available  to  anyone  who  wishes  to  read  it.  In  the  physical 
world  we  have  the  option  of  sending  a  letter  instead  of  a  postcard, 
which  hides  the  content  of  the  message  within  an  envelope,  making 
it  difficult  for  others  to  read  the  content.  In  the  electronic  world  we 
do  not  have  physical  envelopes,  but  we  do  have  a  few  options. 

These  options  include  encryption,  e.g.,  using  software  such  as 
PGPto  make  your  e-mail  unreadable  to  anyone  but  the  intended  re- 
cipient. Alternatively,  you  could  choose  to  mask  your  identity  by  cre- 
ating an  alias  or  pseudonym  using  services  such  as  Yahool's  Ya- 
hoolMail  [http://mail.yahoo.com]  or  Microsoft's  HotMail  [http:// 
www.hotmail.com].  Or  you  might  choose  to  take  advantage  of  the 
several  anonymous  or  semi-anonymous  Remailer  Services  on  the  In- 
ternet. Lastly  you  can  use  one  of  the  new  generations  of  secure  e- 
mail  services  such  as  Hush  Corporation's  HushMail  [http://www.hush 
mail.com]  or  ZipLip  [http://www.ziplip.com],  which  enable  secure 
encrypted  messaging  using  your  standard  Web  browser. 

According  to  the  History  of  PGP  FAQ,  PGP  was  created  in  the  mid- 
1980s  by  Phil  Zimmer.  PGP  is  based  upon  a  concept  called  Public 
Key  Encryption  in  which  each  individual  has  two  keys  —  one  public 
and  one  private.  The  public  key  is  made  available  to  everyone  with 
whom  the  user  would  like  to  exchange  private  e-mail.  The  private  key 
should  never  be  shared  with  anyone.  If  you  encrypt  a  message  to  a 
user  using  that  user's  PGP  public  key,  then  only  that  user  could  read 
the  message  using  their  private  key.  To  use  PGP,  you  need  to  have  a 
"key  ring"  of  all  the  public  keys  of  individuals  with  whom  you'd  like 
to  communicate  privately. 

Another  benefit  of  using  public  key  encryption  is  the  ability  to 
digitally  sign  a  message.  By  using  your  private  key  to  encrypt  a  mes- 
sage you  make  it  unreadable  to  anyone  who  does  not  have  your  pub- 
lic key.  Using  the  public  key  to  decode  the  message  guarantees  the 
recipient  that  the  message  was  signed  with  your  private  key.  For  more 
information,  see  SCGPP's  "Master  the  Art  of  PGP." 

A  Remailer  Service  allows  you  to  forward  e-mail  to  anyone  on  the 
Internet  while  the  remailer  removes  your  return  address  information. 
Some  remailers  are  truly  anonymous  and  offer  no  way  for  the  recip- 
ient to  reply  to  the  sender  of  the  message,  while  others  are  consid- 
ered pseudo-anonymous.  The  pseudo-anonymous  servers  do  strip  off 
the  author's  name  and  e-mail  address  but  instead  of  discarding  this 
information  completely,  the  servers  keep  the  information  on  file  in 
order  to  forward  responses  to  the  anonymous  messages  back  to  the 
originating  author.  A  wealth  of  more  information  on  Remailer  Ser- 
vices appears  at  Andre  Bacard's  site  on  Web  and  e-mail  privacy 
[http://www.andrebacard.com/privacy.html]. 

However,  only  truly  anonymous  remailers  can  be  considered  se- 
cure, as  the  administrators  of  the  pseudo-anonymous  server 
anon.penet.fi  learned.  In  1996  the  Church  of  Scientology,  with  the 
cooperation  of  Interpol,  succeeding  in  forcing  the  administrators  of 
anon.penet.fi  to  reveal  the  identity  of  an  individual  accused  of  dis- 
tributing church  secrets  while  hiding  behind  the  anonymity  of  the 
remailer.  More  information  about  this  incident  appears  at 
http://www2.thecia.net/~rnewman/scientology/anon/penet.html. 
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mother  mentioned  in  a  telephone  con- 
versation that  her  son  had  "bombed" 
in  a  school  play,  the  Canadian  Security 
Agency  identified  her  as  a  potential  ter- 
rorist (Jeffrey  Rosen,  "The  Eroded  Self," 
The  New  York  Times,  4/30/2000). 

Information    professionals    may 
well  understand  another  problem 


Adforce,  and  Engage  Technologies - 
Adsmart  Network.  (See  "Your  Browser 
Is  Selling  You  Out,"  PC  Computing, 
3/2000  p.  92,  for  links  to  privacy  poli- 
cies and  opt-out  information.)  De- 
tailed information  on  these  and  addi- 
tional profilers  is  available  in  "Special 
Report:  The  Privacy  Problem,"  Theln- 
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facing  data  miners  —  incompatible 
database  software  and  data  struc- 
tures. One  solution  may  arrive  soon 
—  CPEX  [Customer  Profile  Exchange, 
http://www.cpex.org],  a  new  XML- 
based  industry  specification  sched- 
uled for  release  this  summer.  While  it 
could  become  a  privacy  advocate's 
nightmare,  it  might  also  incorporate 
privacy  controls.  JunkBusters'  Jason 
Catlett  said,  "There's  an  old  saying 
that  if  you  automate  a  mess,  you  just 
get  a  bigger  mess.  The  sharing  of  per- 
sonal information  is  a  big  mess  in  this 
country  right  now.  That  said,  the 
CPEX  developers  are  clearly  thinking 
about  privacy  because  they  know  it's 
a  potential  party-stopper....  I  think 
it's  a  good  idea  if  standards  provide  a 
way  for  companies  to  easily  abide  by 
fair  information  practices  (Wired 
News,  11/15/99). 

A  small  number  of  Internet  adver- 
tising agencies  produce  almost  all  Web 
banner  ads.  These  companies  include 
24/7  Media,  _Flycast,  Real  Media, 
MatchLogic,  Doubleclick-Netgravity, 


dustry  Standard,  3/13/2000,  http:// 
www.thestandard.com/article/dis 
play/0,1151,12587,00.html. 

Some  of  these  agencies  promise  ad- 
vertisers very  focused  and  targeted 
marketing.  Such  promises  require  Web 
profilers  to  impinge  on  what  some 
would  consider  private  information.  At 
present,  targeted  advertising  on  the 
Web  isn't  selling.  Advertisers  just  want 
to  reach  as  large  an  audience  as  possi- 
ble and  are  only  interested  in  the  most 
basic  categories,  such  as  age  group, 
gender,  or  geographic  location.  As 
Martin  Smith  of  MatchLogic,  a  targeted 
Web  advertising  company,  explained, 
"The  clients  say  we  have  to  prove  we 
are  faster,  better  and  cheaper  for  them 
to  use  us.  We  will.  This  is  like  television 
in  1950"  (Saul  Hansell,  "So  Far,  Big 
Brother  Isn't  Big  Business,"  The  New 
York  Times,  5/7/2000).  In  other  words, 
though  Web  profilersmay  not  be  a  big 
problem  today,  there's  nothing  to  pre- 
vent them  from  becoming  a  big  prob- 
lem tomorrow. 


Privacy  Versus  Personalization 

To  date,  advertising  or  sponsorship 
has  served  as  the  main  funding  source 
for  all  the  "free"  Internet  surfing,  search- 
ing, and  content,  as  well  as  for  much  of 
the  software  and  hardware  innovations 
that  enable  it.  And  what  is  the  coin  of 
the  realm  on  the  advertising-supported 
Web?  As  Forrester  Research  analyst 
Chris  Charron  said,  "If  the  business 
model  is  advertising,  the  commodity  is 
personal  data"  (Wired  News,  6/24/98). 
Certainly  information  professionals 
understand  that  information  isn't  free. 
It's  really  a  question  of  understanding 
what  the  price  will  be  beforehand  and 
agreeing  to  pay  it.  Full  disclosure 
should  include  details  of  who  else  gets 
the  collected  information  and  how  it 
will  be  used. 

When  users  see  options  to  person- 
alize their  Internet  connections,  e.g., 
on  portals  or  through  specific  user- 
interest  profiles,  no  one  argues  that 
personalization  by  itself  is  a  bad  goal. 
Everyone  wants  the  convenience  and 
efficiencies  promised  by  the  concept 
of  personalized  service,  but  now  the 
word  "personalization"  may  have  pos- 
sibly additional  implications  due  to 
previous  industry  practices. 

Analyst  Andrew  Shein  of  the  Elec- 
tronic Privacy  Information  Center 
(EPIC)  says,  "...companies  that  are  col- 
lecting detailed  information  from  on- 
line consumers  without  their  knowl- 
edge and  consent  are  not  personalizing 
—  they  are  invading  privacy"  (Wired 
News,  11/16/99). 

Privacy  as  a  Selling  Point 

There  are  powerful  inducements 
for  the  success  of  e-commerce.  For- 
rester Research  senior  analyst  John 
Nail  estimated  that  privacy  concerns 
kept  online  consumers  from  spending 
an  additional  $2.8  billion  online  in 
1999  (ZDNet  News,  5/9/2000). 

Getting  e-commerce  right  means 
making  sure  consumers  are  comfort- 
able, and  polls  show  that  many  users 
are  worried  about  online  privacy.  For 
example,  81  percent  of  Internet  patent 
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INFORMATION 
PROFESSIONALS  — 

What  to  Do  About  Privacy 


Privacy/Confidentiality  Audit 

•  Check  out  your  system.  Test  your  security  with  free  on- 
line evaluations  from  http://grc.com,  http://www.omon- 
router.net/Tests.html  or,  for  high-speed  connections,  http:// 
www.dslreports.com/secureme.  [See  other  sites  in  the  "Privacy 
Resources"  sidebar  on  page  42  and  "Tech  Talk"  on  page  44.] 

•  Check  out  yourself  and  your  company  on  the  Net  —  search  for  your  own 
name,  your  "nom  de  surf,"  your  co-workers,  your  company  and  its  products/services  using  various  search 
engines,  http://Www.cleja.com  and  http://www.company.sleuth.com/index.cfm.  You  can  also  order  a  report  from 
PrivacyScan  for  $39.95:  http://www.privacyscan.com/orderreport.html 

•  Check  out  your  company's  privacy  issues.  Talk  to  the  IT  department;  check  policies;  check  actual  practices, 
even  records  storage.  (One  worker  found  a  bunch  of  improperly  secured  personnel  records,  copied  informa- 
tion,. ahd,laterrmany  employees  had  their  identities  stolen  and  multiple  charges  on  their  credit  cards.) 

••'jfneck  out  your  vendors,  search  engine/reference/online  database  sites,  information  services,  etc.  What  are 
/  ./the  policies  on  both  privacy  and  usage?  How  is  the  security?  What  assurances  do  you  have? 
:i  Keep  up-to-date  with  r^ew  developments  in  technology,  software,  laws,  etc.,  that  affect  privacy  issues. 

^Implement  Solutions/  J 

^Consider  using  cookif'manager,  e-mail  encryption,  and  anonymous  surfing  software. 

®:  Establish  new  "nopfde  surfs"  from  free  Net  e-mail  services  when  necessary. 

°  Use  outside  consultants  who  don't  have  to  identify  their  clients,  especially  when  you  don't  want  others  to 
know  about  your  company's  interest  in  a  subject.  (By  the  way,  in  the  spirit  of  full  disclosure:  One  of  the  au- 
thors is  a  consultant  who  gets  a  considerable  amount  of  business  for  this  very  reason.) 

•  Anytime  you're  asked  to  submit  confidential  information,  check  for  SSL  (https://...).  Also,  consider  restarting 
your  browser  to  create  a  new  session  before  and  after  submitting  such  information  to  avoid  clickstream  capture. 

o  When  faced  with  decisions  affecting  privacy,  such  as,  "Why  keep  your  bookmarks,  e-mail,  and/or  storage  on- 
line?," think  through  the  risk-benefit  equation. 

Publicize/Evangelize 

®  Use  affirmative,  proactive  information  privacy  notification  techniques  in  a  manner  similar  to  the  use  of  copy- 
right protection  notices.  For  example,  consider  using  headers  on  search  output  or  e-mail.  ("The  information 
contained  in  this  e-mail  is  confidential  and  is  intended  for  the  use  of  the  individual  or  entity  named  above. 
If  you  have  received  this  e-mail  in  error,  please  contact  us.  Thank  you.") 

8  Educate  others  inside  and  outside  your  company.  Have  information  ready  to  give  to  both  the  overly  suspicious 
and  the  overly  casual.  Soothe  paranoid  users  and  frighten  users  not  scared  enough. 

•  Formulate  privacy  guidelines.  Ask  search  services  and  sites  to  agree  to  them. 

«  Publicize  that  we  information  professionals  ourselves  conform  to  ethical  guidelines  in  which  confidentiality 
figures  prominently  (and  make  sure  that  we  do):  ALA  Code  of  Ethics  [http://www.ala.org/alaorg/oif/ethics.html]; 
AMP  Code  of  Ethical  Business  Practice  [http://www.aiip.org/purethics.html];  ASIS  Professional  Guidelines 
[http://www.asis.org/AboutASIS/professional-guidelines.html];  and  SCIP  Code  of  Ethics  for  CI  Professionals 
[http://www.scip.org/ci/ethics.html]. 

®  Vote  your  conscience  with  your  ballot  and  your  wallet  when  it  comes  to  the  politicization  of  privacy  issues. 
Ask  your  colleagues  and  professional  organizations  to  do  the  same. 
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information  users  expressed  concern 
over  the  lack  of  security  of  Internet 
sites  ("Managing  Patent  Information: 
An  Emerging  Two-Tiered  Approach," 
available  from  Derwent,  http://www. 
derwent.com].  As  Steve  Larsen,  VP  of 
online  ad  company  Net  Perceptions, 
said, "  Unless  people  can  trust  the  peo- 
ple on  the  other  side,  commerce  won't 
happen.  Good  privacy  policies  just 
make  good  business  sense"  (Wired 
News,  11/ 16/99): 

Some  marketers  are  hearing  the 
consumer  call  for  privacy  so  clearly 
that  the  issue  of  privacy  is  becoming  a 
marketing  strategy.  The  Privacy  Con- 
sortium is  a  new  group  of  26  Internet 
ad  companies  based  on  "permission 
marketing."  The  Consortium's  guide- 
lmes  require  that  businesses  state 
what  information  is  collected,  offer  a 
clear  "opt-out"  policy,  and  perform  a 
yearly  privacy  audit.  "I  insist  we  eat  our 
own  dog  food,"  said  co-chair  Bonnie 
Lowell,  who  continued,  "If  you  don't 
want  to  comply,  don't  join"  {The  New 
York  Times,  4/3/2000). 

A  number  of  new  products  and  ser- 
vices foCus  on  consumer  privacy.  Bon- 
nie Lowell's  company  Younology  sells 
the  program  "My  Orby,"  which  shows 
consumers  how  they  are  being  tracked 
on  the  Web. 

Search  site  TopClick  advertises  it- 
self as  "The  Internet's  PRIVATE  Search 
Engine."  TopClick  has  also  collected  a 
large  number  of  privacy  resources,  in- 
cluding a  good  privacy  news  service, 
and  sponsors  a  "Partners  in  Privacy" 
Affiliate  program. 

Zero-Knowledge  Systems  is  one  of 
a  number  of  personal  identity-man- 
agement companies  in  the  new  info- 
mediary  market  space.  These  infome- 
diaries  "will  protect  the  privacy  of  their 
clients"  and  "help  customers  maxi- 
mize the  value  of  their  data,"  said  John 
Hagel  III  and  Marc  Singer,  in  NetWorth 
—  Shaping  Markets  When  Customers 
Make  the  Rules  (McKinsy  &  Co.,  1999, 
0-87584-889-3).  Other  players  include 
PrivaSeek,  Lumeria,  Popular  Demand, 
Eriohymbus,  PrivacyBank,  Ezlogin, 
and  Proxymate. 


So  What's  an  Information 
Professional  to  Do? 

Information  professionals  certainly 
understand  the  benefits  of  both  per- 
sonalization and  privacy  in  the  deliv- 
ery of  information.  Actually,  it's  what 
we  already  do  —  it's  our  job  to  deliver 
personalized,  tailored  information 
with  confidentiality.  Much  of  the  cur- 
rent discussion  involving  Internet  top- 
ics sounds  very  familiar. 

In  a  recent  interview,  Yahoo!  co- 
founder  Jerry  Yang  could  have  been 
speaking  about  information  profes- 
sionals when  he  said,  "People  ask  me, 
'How  are  you  going  to  keep  people  from 
just  bypassing  you  and  going  directly  to 
your  partners?'  The  answer  is ...  we  will 
be  bypassed  if  we  stop  adding  value  for 
the  customer.  That  is  a  very  difficult 
challenge."  Yang  spoke  about  Yahoo! 's 
plans  for  improvements  that  will  give 
users  a  "personalizable  and  compre- 
hensive shopping  experience,"  adding, 
" . .  .to  build  a  relationship,  it's  critical  to 
do  it  over  time.  We  hope  we  have  de- 
veloped a  level  of  trust  and  ease  that 
only  time  can  buy"  ("Yang:  Yahoo!  Get- 
ting Personal,"  Matthew  Broersma,  ZD- 
Net  News,  3/2/99). 

Information  professionals  have  a 
long  history  of  commitment  to  infor- 
mation privacy.  Recall  the  librarians 
who  refused  to  reveal  patrons'  bor- 
rowing histories  during  the  FBI's  no- 
torious "spies  in  the  stacks"  Library 
Awareness  program  [Herbert  N.  Foer- 
stel,  Surveillance  in  the  Stacks  —  The 
FBI's  Library  Awareness  Program, 
Greenwood  Press,  1991,  http://info. 
greenwood.com/books/0313267/ 
0313267154.html].  Our  privacy  poli- 
cies are  posted.  We  need  to  publicize 
our  observance  of  those  guidelines 
and  distance  ourselves  from  ques- 
tionable practices,  especially  in  regard 
to  obtaining  and  distributing  confi- 
dential and  personal  information.  [See 
the  second  from  last  entry  in  the  "In- 
formation Professionals  — What  to  Do 
About  Privacy"  sidebar  on  page  47.] 


Information  professionals  get  a  lot  of 
use  from  the  Internet  and  its  "free"  in- 
formation. Most  of  us  can't  really  do  our 
jobs  without  it  any  more.  We  may  even 
have  a  duty  to  search  the  Internet,  as  T. 
R.  Halvorsoen  described  in  "Searcher 
Responsibility  for  Quality  in  the  Web 
World"  [Searcher,  vol.  6,  no.  9,  Octo- 
ber 1998,  http://www.infotoday.com/ 
searcher/oct98/halvorsen.htm]. 

Companies  are  also  required  to  take 
"reasonable  measures"  to  protect  con- 
fidential information.  As  we  learn 
more  about  the  lack  of  privacy  on  the 
Web,  it  certainly  starts  to  seem  rea- 
sonable to  use  some  of  the  privacy 
protection  tools  described  here.  You 
don't  have  to  wait  until  you're  in  an  ac- 
cident to  remember  to  use  a  seat  belt 
every  time  you're  in  a  car. 

Information  professionals  can  bring 
a  lot  of  advantages  to  the  discussion  of 
confidentiality  and  privacy  on  the  Web. 
The  current  situation  can  be  a  real  op- 
portunity for  us  to  take  a  proactive 
stance  to  protect  privacy  on  the  Inter- 
net, show  leadership,  and  make  contri- 
butions. We  can  start  by  educating  our- 
selves, our  companies,  and  our  vendors. 

There's  lots  of  activity  in  the  online 
privacy  arena.  The  situation  is  chang- 
ing rapidly,  the  laws  are  in  flux,  and 
parts  of  this  article  may  well  be  dated 
by  the  time  it's  published.  For  every  cal- 
endar year,  at  least  7  years  zoom  by  on 
the  Web.  Yes,  you  guessed  it,  everyone's 
a  dog  on  the  Internet — and  we  have  to 
keep  on  learning  new  tricks.  * 
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"They  could  hear  Circe  within,  singing  most 
beautifully  as  she  worked  at  her  loom,  making  a 
web  so  fine,  so  soft,  and  of  such  dazzling  colors  as 
no  one  but  a  goddess  could  weave. " 

Homer,  The  Odyssey,  Book  X 
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Webs  fascinate  us.  Just 
as  Odysseus'  men  were 
dazzled  by  the  allure  of 
Circe's  web,  so  are  we  powerfully 
drawn  to  understand  and  map  the 
varied  and  intricate  strands  of  the 
World  Wide  Web.  Virtually  all  who 
come  in  contact  with  the  Web  find 
themselves  to  one  degree  or  another 
creating  guides  to  share  its  enchant- 
ments with  others.  Ranging  from 
simple  lists  of  links  to  massive 
indexes  compiled  by  software  dri- 
ven search  engines,  the  Web  seems 
to  bring  out  the  inner  librarian  in 
us  all. 

Unfortunately,  many  who  take 
on  the  daunting  task  of  cataloging 
the  Web  find  themselves  hopelessly 
ensnared — like  Odysseus'  men,  who 
succumbed  to  Circe's  enticements 
only  to  find  themselves  trans- 
formed into  swine.  The  crew  of  the 
Open  Directory  Project  (ODP)  has 
avoided  this  unfortunate  fate,  and 
in  the  process  have  seen  their 
efforts  gain  an  unprecedented 
acceptance.  Little  more  than  two 
years  old,   the  ODP  is  leading  a 
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resurgence  of  human-compiled  Web 
directories,  in  the  process,  toppling 
spider-compiled  search  engines  from 
their  dominant  positions  as  principal 
gateways  to  the  Internet. 

The  ODP  has  succeeded  by  cou- 
pling a  simple,  yet  elegant,  Web 
directory  to  the  engine  of  a  grass- 
roots marketing  campaign  that  has 
won  the  hearts  and  captured  the 
minds  of  millions  of  Web  users.  The 
ODP's  straightforward  Web  direc- 
tory needs  little  introduction  or 
explanation.  Its  workman-like  inter- 
face and  competent  search  capabili- 
ties make  it  an  appropriate  tool  for 
searchers  at  nearly  all  levels  of  com- 
petence. The  truly  interesting  part 
of  the  ODP  story  lies,  not  in  its 
mechanics,  but  in  its  genesis  and 
evolution,  and  the  behind  the  scenes 
goings-on  in  the  inner  sanctum  of 
the  project. 

THE  HISTORY  OF  THE  OPEN 
DIRECTORY  PROJECT 

Like  many  early  adopters  of  the 
Web,  ODP  co-founders  Rich  Skrenta 
and  Bob  Truel  were  ardent  Yahoo! 
users  during  the  mid-90s.  YahooTs 
directory  was  tiny  compared  to  the 
indexes  built  by  search  engine  rivals 
Excite,  Lycos,  and  AltaVista,  but  its 
hierarchical  structure  and  well- 
designed  taxonomy  made  Yahoo!  a 
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preferred  tool  for  finding  things  on 
the  then  nascent  Web. 

By  1997,  however,  it  became  increas- 
ingly apparent  to  Skrenta  and  Truel 
that  Yahooi's  management  was  being 
lured  by  the  siren  call  of  ecommerce 
and  "community."  As  Yahooi's  man- 
agement spent  billions  buying  up 
companies  and  expanding  their  ser- 
vices to  include  shopping,  personal 
home  pages,  and  local  community 
sites,  the  core  directory  languished, 
at  least  in  the  eyes  of  many  veteran 
users.  "Link  rot"  had  set  in,  resulting 
in  many  "not  found"  messages. 
Compounding  the  problem,  the 
Yahoo!  directory  was  simply  not 
keeping  pace  with  the  explosive 
growth  of  the  Web. 

Chris  Tolles,  Director  of  Marketing 
for  the  Open  Directory  Project, 
recounts  how  Skrenta  and  Truel's 
frustration  with  Yahoo!  led  to  the 
birth  of  the  ODP.  "Looking  at  the 
consternation  of  the  Web  community 
over  the  extreme  difficulty  of  being 
listed  in  Yahoo!  and  how  crufty  their 
directory  was  becoming  (large  amounts 
of  dead  links,  increasingly  irrelevant 
information,  etc.),  it  was  clear  that 
there  was  an  opportunity  to  make 
things  better,"  says  Tolles. 

Skrenta  and  Truel  reasoned  that 
Yahoo!'s  problems  might  simply  be 
the   result  of  inadequate  resources 
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being  allocated  to  the  directory.  After 
all,  with  millions  of  new  pages  being 
added  to  the  Web,  and  existing  pages 
being  moved  around  or  deleted  by 
legions  of  unwitting  Webmasters 
who  didn't  realize  they  were  break- 
ing directory  listings,  how  could 
Yahooi's  relatively  small  staff  of 
"surfers"  be  expected  to  keep  up? 

By  1997,  HOWEVER, 
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In  early  1998,  Skrenta  and  Truel 
experienced  an  epiphany.  The  pair 
were  working  as  engineers  at  Sun 
Microsystems  and  had  seen  first- 
hand how  successful  the  "Open 
Source"  model  had  been  in  bootstrap- 
ping a  wide  range  of  software  projects 
with  little  investment  or  expense.  In 
particular,  Gnu,  the  open  source 
UNLX  platform  had  caught  on  like 
wildfire,  and  its  success  spurred 
other  open  source  initiatives.  Apache, 
the  most  popular  Web  server  soft- 
ware, was  open  source.  And  Netscape 
had  just  taken  the  bold  step  of  freely 
licensing  the  source  code  of  its 
Communicator  browser,  hoping  to 
marshall  the  combined  efforts  of  the 
open  source  community  to  help  win 
its  "browser  war"  with  Microsoft. 

The  idea  was  born:  Instead  of 
standing  by  in  frustrated  anger,  why 
not  use  open  source  tactics  to  build  a 
Web  directory?  "Bob  Truel  came  up 
with  the  hook — get  the  Web  commu- 
nity itself  to  work  on  the  directory," 
says  Tolles.  Thus,  the  pair  began 
work  on  the  open  source  Web  direc- 
tory. Initially  named  "Gnuhoo"  (a 
cross  between  Gnu  and  Yahoo!),  the 
service  went  live  June  5,  1998. 
Within    a   month,   it   had   attracted 
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attention  from  Wired  magazine,  Red 
Herring,  and  Search  Engine  Watch. 

By  June  18,  Gnuhoo  claimed  that 
over  200  editors  were  working  on  the 
project,  having  listed  27,000  sites  in 
over  2,000  categories.  The  project 
was  clearly  touching  a  nerve  in  the 
Web  community.  And  its  success 
wasn't  going  unnoticed  by  its  larger 
competitors.  "We  were  approached 
by  three  major  portals,  and  by 
October,  had  been  acquired  by 
Netscape — five  months  after  putting 
the  service  up,"  says  Tolles. 

Gnuhoo's  name  evolved  as  quickly 
as  its  Web  directory.  When  a 
firestorm  of  controversy  on  the  influ- 
ential news  source  Slashdot  alleged 
that  the  Gnuhoo  name  didn't  comply 
with  the  terms  of  the  GNU  General 
Public  License,  the  directory  changed 
its  name  to  "Newhoo."  By  the  time  it 
was  acquired  by  Netscape,  the  ser- 
vice had  grown  to  100,000  listed  sites 
in  2,500  categories,  with  a  volunteer 
force  of  4,500  editors.  Rather  than 
risk  the  ire  of  deep-pocketed  competi- 
tor Yahoo!  with  its  new  directory 
with  a  similar-sounding  name, 
Netscape  scuttled  Newhoo  in  favor  of 
the  bland,  but  egalitarian,  Open 
Directory  Project  (ODP). 


But  the  whimsical  nature  of  the 
ODP's  initial  name  was  not  entirely 
lost.  When  Netscape  spun  its  browser 
code  out  into  the  open  source  com- 
munity, its  official  site  became 
Mozilla.org.  Mozilla  had  been  the 
code  name  for  the  first  Netscape 
browser,  a  combination  of  Mosaic, 
the  browser  the  Netscape  team  had 
authored  while  they  were  college  stu- 
dents, and  Godzilla.  In  a  nod  to  both 
Netscape's  and  Gnuhoo's  initial 
incarnations,  the  ODP  informally 
became  known  as  the  Mozilla  Direc- 
tory and  its  official  site  became 
dmoz.org,  which  remains  its  current 
home  on  the  Web. 

ODP  EVERYWHERE 

Tapping  into  the  Web's  vast  reser- 
voir of  talent  to  help  construct  and 
maintain  the  directory  was  just 
part  of  the  ODP's  success  equation. 
Taking  yet  another  lesson  from  the 
open  source  movement,  the  ODP 
made  its  most  important  strategic 
move:  The  directory  data  would  be 
freely  available  to  all  takers.  The 
move  was  risky.  What  if  a  major 
search  service  took  the  directory  data 
and  used  it  to  (horrors!)  make  money 
by  serving  ads  in  the  results?  Would 


C    Alexa  User  Reviews  of  the  ODP 

http://reviews.alexa.com/review?type=3&url=dmoz.org:80 

£   Goodman,  Andrew.  "Why  the  Open  Directory  Isn't  Open" 

http://www.traffick.com/story.asp?StoryID=59 

C  Google  Directory 

http://www.google.com/directory.html 

L  Oingo 

http://www.oingo.com 

I    The  Open  Directory  Project  i  INKS 

http://www.dmoz.org 

'    Search  Engine  Forums 

http://www.searchengineforums.com 

K    Sites  Using  Open  Directory  Data 

http://dmoz.org/Computers/Internet/WWW/Searching_the_Web/Directories/ 
Open_Directory_Project/Sites_Using_ODP_Data/ 
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the  directory's  idealistic  volunteer 
editors  abandon  the  search  service 
they  had  worked  so  hard  to  build? 

Initially,  beyond  the  obligatory 
presence  in  Netscape's  Netcenter 
portal,  only  a  few  small  Web  sites 
integrated  ODP  data  into  their 
search  results.  Then,  on  April  16, 
1999,  Lycos  announced  that  it  would 
boldly  feature  ODP  results,  even  giv- 
ing them  prominence  over  results 
drawn  from  its  own  spidered  index. 
HotBot  would  also  use  ODP  data.  At 
this  point,  the  ODP  had  grown  to 
more  than  8,000  editors,  with 
430.000  sites  and  05.000  categories. 

There  was  surprisingly  little  protest 
from  the  volunteer  corps  of  editors. 
In  fact,  the  rate  of  growth  of  volun- 
teer editors  began  to  grow  dramati- 
cally, so  much  so  that  more  stringent 
selection  and  screening  processes 
were  put  into  place.  The  reason  for 
the  spurt  in  growth?  A  brilliant  pro- 
vision in  the  terms  of  the  ODP 
license  agreement  that  required  all 
users  of  directory  data  to  provide  an 
attribution  statement  on  every 
page.  And  this  attribution  statement 
included  links  not  just  to  ODP's 
home  page,  but  also  to  the  "Become 
an  editor"  application  page. 

This  master  stroke  turned  the 
"free"  use  of  data  into  one  of  the 
most  effective  "viral"  marketing  cam- 
paigns ever  unleashed  on  the  Web, 
attracting  thousands  of  new  editors 
who  dramatically  increased  the  size 
of  the  directory.  In  short  order. 
AltaVista,  AOL,  DirectHit,  Dogpile, 
Euroseek.  and  dozens  of  other  search 
engines  licensed  the  use  of  ODP 
data.   Today,   the  ODP  boasts   more 
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than  22,000  editors,  with  more  than 
1.5  million  sites  in  over  240,000  cate- 
gories. With  the  number  of  major 
sites  using  its  data,  ODFs  reach  of 
potential  users  now  comes  close  to 
rivaling  Yahool's.  And,  according  to 
its  own  internal  measurements,  the 
directory  contains  more  links  than 
Yahoo!  and  is  growing  at  a  consider- 
ably faster  rate.  The  service  expects 
to  have  more  than  two-million  links 
by  mid-summer  2000. 

The  ODP  is  a  textbook  case  of 
entrepreneurs  responding  to  a  per- 
ceived failing  in  an  existing  service. 
Skrenta  and  Truel  didn't  get  mad. 
They  got  even. 

ODP  EDITORS  AND  QUALITY 
CONTROL 

As  impressive  as  the  ODP's  growth 
has  been,  it's  only  natural  to  question 


how  a  loosely-knit  organization  with 
tens  of  thousands  of  contributors  can 
maintain  strict  quality  control  mea- 
sures and  avoid  the  Yahoo!-like  prob- 
lems that  initiated  the  effort  in  the 
first  place.  The  two  fundamental  con- 
cerns for  any  Web  directory  are  the 
knowledge  and  skill  of  the  editors 
who  compile  the  directory,  and  the 
quality  of  the  links  they  create. 

In  the  early  days,  the  ODP  exer- 
cised little  formal  quality  control. 
Editors  simply  chose  a  category  and 
started  populating  it  with  links. 
Similarly,  there  were  few  editorial 
guidelines  other  than  to  pick  the 
"best"  links  for  a  category.  As  the 
directory  grew,  this  laissez-faire 
approach  generated  a  moderate 
amount  of  chaos.  In  a  press  release 
issued  in  mid-summer  of  1998,  Tolles 
was  quoted  as  saying,  "This  won't  be 
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stable  and  static.  I'm  sure  there  will 
be  pissing  contests  between  editors 
and  so  forth.  But  the  whole  thing  is 
self-governing.  It  will  even  itself  out." 

In  time,  as  the  ODP  became  more 
mainstream,  stricter  quality  control 
measures  were  put  into  place.  "The 
core  concept  of  quality  control  for  the 
Open  Directory  Project  is  that  of  peer 
review,"  says  Tolles.  "We  grant  a  very 
small  slice  of  initial  control  to  a  new 
editor,  and  they  have  to  prove  them- 
selves before  they  qualify  for  addi- 
tional categories  within  the  directory. 
Also,  there  are  often  multiple  editors 
within  the  same  category  cross  check- 
ing each  other's  work." 

The  peer  review  process  is  sup- 
ported by  various  mechanisms,  includ- 
ing subject-based  forums  that  are 
restricted  to  ODP  editors,  and  email 
between  editors  and  the  hierarchy. 
"The  editors  are  pretty  damn  tough  on 
each  other,"  according  to  Steven 
Kassel,  editor  of  more  than  two-dozen 
ODP  categories.  "The  forums  are  for 
questions  to  and  from  editors.  Just 
reading  a  day's  worth  of  posts  make  it 
clear  that  quality  is  the  number  one 
concern  and  that  editors  are  primarily 
interested  in  doing  a  good  job,"  says 
Kassel.  The  forums  have  had  more 
than  100,000  posts  in  the  year  that 
they  have  been  available  to  editors, 
according  to  Tolles. 

Some  editors  impose  strict  guide- 
lines on  their  own  selection  process. 
Kassel,  who  edits  finance  and  tax  cat- 
egories, says  "I  am  also  careful  not  to 
add  sites  for  which  the  owner  does  not 
appear  to  carry  a  valid  license.  If 
someone  purports  to  represent  indi- 
viduals with  tax  problems,  they  must 
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be  licensed  as  an  EA,  CPA,  or  attor- 
ney. When  it  is  clear  that  the  site  is 
not  owned  by  a  licensed  individual,  I 
exclude  it  or  move  it  to  a  more  appro- 
priate location." 

The  selection  process  for  accepting 
new  editors  for  the  directory  has  also 
become  more  rigorous.  "The  editorial 
application  process  is  indeed  selec- 
tive, and  we  are  currently  accepting 
less  than  20%  of  the  applications  we 
get.  With  the  reach  our  directory 
enjoys,  we're  getting  a  better  and  bet- 
ter applicant  pool,"  says  Tolles. 
"Selection  criteria  include,  but  are 
not  limited  to,  the  number  of  editors 
in  the  category  at  the  time  of  applica- 
tion, the  ranking  in  the  hierarchy, 
the  qualifications  listed,  and  the 
quality  of  the  application." 

To  address  the  link  rot  problem 
that  plagued  Yahoo!,  the  ODP  has 
instituted  an  automated  link  check- 
ing system.  "We  have  a  crawler  that  is 
run  periodically  which  tells  editors 
that  there  are  sites  which  seem  to  be 
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down,  and  need  to  be  looked  at — 
which  is  why  we  are  consistently 
below  1/2  of  Y/<  dead  links  in  our 
directory,"  says  Tolles. 

INEVITABLE  PROBLEMS 

Naturally,  for  a  service  that 
enjoyed  grassroots  support  and  now 
is  now  an  important  player  in  the 
world  of  Web  search,  not  everyone  is 
happy  with  the  ODP.  At  the  Search 
Engines  Strategies  conference  in 
San  Francisco  in  November  1999,  a 


conference  participant  claimed  that 
one  of  her  business  competitors 
became  an  ODP  editor  and  then 
maliciously  deleted  all  of  her  compa- 
ny's listings  in  the  directory.  Others 
have  raised  similar  charges  in  online 
discussion  groups,  such  as  the  I- 
Search  mailing  list. 

But  the  charges  are  hard  to  sub- 
stantiate. "I  have  never  seen  this 
kind  of  behavior  in  the  area  I  edit. 
ODP  has  log  files  and  monitoring 
mechanisms  in  place  to  review  com- 
plaints," says  editor  Robert  Hoffman. 
Former  editor  Rick  Bier  concurs.  "If 
an  editor  is  giving  his  site  preferen- 
tial treatment  and  the  meta  editors 
became  aware  of  that  practice,  the 
editor  in  question  will  soon  be  an  ex- 
editor,"  says  Bier. 

Complaints  about  the  ODP  can 
also  be  found  on  the  Web.  Writer 
Andrew  Goodman  in  "Why  the  Open 
Directory  Isn't  Open"  takes  an  inter- 
esting, but  controversial,  position 
targeting  the  policies  and  motives  of 
the  ODP.  And  criticism  of  the  ODP 
can  also  be  found  in  other  public  Web 
forums,  such  as  Deja.com,  Search 
Engine  Forums,  and  Alexa's  reviews 
of  the  ODP. 

But  many  of  these  criticisms  read 
like  they  were  penned  by  former  edi- 
tors, or  by  Webmasters  whose  pages 
were  rejected  by  ODP  editors.  The 
ODP  doesn't  appear  to  be  making 
any  official  effort  to  stifle  critical 
comments — indeed,  a  link  to  the 
Alexa  reviews  can  be  found  on  the 
ODP  site  with  this  even-handed 
annotation:  "Some  reviews  biased  by 
reviewers  being  rejected  as  editors  or 
already  being  editors." 

On  balance,  praise  for  the  direc- 
tory far  outweighs  criticism.  "We 
have  very  few  problems,  relatively 
speaking,"  says  Tolles.  "The  goal  of 
us  on  the  staff  side  is  to  improve  the 
system  of  checks  and  balances, 
rather  than  get  in  the  middle  of  edi- 
torial discussion."  Perhaps  the  great- 
est testament  to  the  quality  of  ODP 
data  comes  from  companies  who  are 
building  innovative  search  engines 
that  rely  on  extending  and  enhanc- 
ing its  value.  Two  notable  examples 
are  Oingo  and  Google. 


GROWING  IN  THE  COMPANY 
OF  GIANTS 

In  two  short  years,  the  Open 
Directory  Project  has  grown  from  a 
scrappy  grassroots  movement  to  a 
bona  fide  Web  powerhouse.  Though 
the  challenges  it  faced  in  its  forma- 
tive years  were  certainly  daunting, 
the  ODP  must  now  contend  with  two 
new  major  challenges  to  continue  to 
survive  and  thrive. 

The  first  challenge  will  be  main- 
taining its  autonomy  now  that  it  is 
part  of  the  huge  AOL-Time  Warner 
complex.  The  preliminary  signs  are 
encouraging:  AOL  has  integrated 
ODP  data  into  its  own  search  service 
with  impressive  results.  Nonetheless, 
political,  financial,  and  marketplace 
pressures  may  have  a  disruptive 
effect  on  the  current  ODP  structure. 

"AOL  has  been  very  supportive  of 
the  Open  Directory  running  with  an 
independent  editorial  policy,"  says 
Chris  Tolles.  "We  have  been  very  suc- 
cessful with  the  Open  Directory 
model,  and  have  no  plans  to  change 
the  way  things  are  working.  The  Open 
Directory  will  continue  to  operate  as  it 
does  today  benefitting  AOL,  and  the 
rest  of  the  Web,  by  succeeding  in  the 
mission  of  building  the  most  compre- 
hensive directory  of  the  Web  by  utiliz- 
ing a  legion  of  contributors  from  the 
Web  community,"  says  Tolles. 

Noble  words,  but  AOL's  legal  prob- 
lems with  "volunteers"  in  the  past 
have  led  to  dramatic  changes  and 
scaling  back  the  use  of  unpaid  help 
elsewhere  in  AOL's  vast  collection  of 
online  properties.  And  one  only  needs 
to  look  at  what  happened  to  Infoseek 
once  it  was  subsumed  into  the 
Go/Disney  conglomerate  to  envision  a 
similar  threat  to  the  ODP.  Once  her- 
alded as  an  integral  part  of  the  Disney 
empire,    Go/Infoseek    has    recently 
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INNOVATIVE      USERS      OF      ODP      DATA 


Oingo:  Meaning  Based  Search 

One  of  the  downsides  of  ODP  data  being  freely  available  is  that  it's  a  relatively  easy  job 
to  take  the  data,  slap  together  a  pretty  interface,  sell  a  few  ads,  and  go  into  business 
as  a  "new"  search  service.  Dozens  of  these  "new"  search  engines  have  popped  up  and 
many  have  no  compelling  reason  to  exist  other  than  to  generate  advertising  revenue  for 
their  creators.  One  impressively  notable  exception  is  Oingo. 

Oingo's  difference  is  immediately  obvious:  No  ads,  fancy  graphics,  newsfeeds,  or  any 
other  bolted-on  "features"  that  are  the  hallmarks  of  most  ODP  powered  portal- 
wannabes.  Oingo's  initial  screen  is  a  simple  search  form  with  links  to  the  top  categories 
of  the  ODP  directory.  Oingo's  search  engine  goes  beyond  simple  keyword  matching, 
attempting  to  understand  the  meaning  of  your  query  by  comparing  it  to  the  Oingo 
Lexicon,  a  rich  database  of  words,  meanings,  and  their  relationships. 

Results  are  presented  for  both  matching  categories  and  individual  Web  sites.  A  light 
bulb  symbol  indicates  a  "Meaning  Hit"— that  the  result  appears  to  be  conceptually  related 
to  your  search  terms.  Oingo  also  prompts  you  to  narrow  your  search  to  specific  mean- 
ings for  each  of  your  primary  keywords.  As  with  any  search  engine,  the  default  is  all  pos- 
sible meanings  of  a  term.  But  Oingo  also  suggests  limiters  based  on  specific  definitions 
of  the  word,  and  allows  you  to  simply  search  for  the  occurrence  of  the  word,  not  its  mean- 
ing. This  ability  to  narrow  your  query  based  on  semantics  and  specific  word  meanings  is 
an  extremely  powerful  feature  and  adds  significant  value  to  the  core  ODP  directory  data. 

Google:  Spotlighting  "Important"  Sites 

Google  has  also  endorsed  the  value  of  ODP  data  by  using  it  in  the  Google  Directory. 
Google  applies  its  PageRank  technology  to  generate  results  ranked  according  to  "impor- 
tance," rather  than  in  alphabetical  order  or  by  computed  relevance.  Importance  is  calcu- 
lated in  part  by  the  quality  and  quantity  of  links  pointing  to  a  particular  Web  site.  In  essence, 
Google  attempts  to  identify  the  most  highly  regarded  pages  on  the  Web  for  any  particular 
topic,  and  assigns  them  the  highest  PageRank  scores  (see  "Organizing  the  World's 
Information:  Google  Raises  the  Bar  on  Search  Technology"  by  Jeff  Pemberton,  pp.  41-48 
in  the  May/June  2000  issue  of  ONLINE  for  more  information). 

Matching  directory  categories  are  presented  at  the  top  of  Google  directory  results. 
Clicking  on  a  major  category  brings  up  ODP  results  displayed  in  PageRank  order.  For  exam- 
ple, searching  on  the  term  "airlines"  brings  up  three  matching  categories.  The  top  cate- 
gory is  for  commercial  airlines,  and  results  are  displayed  so  that  the  major  global  carriers 
appear  at  the  top  of  the  list.  This  means  you  see  American,  United,  Delta,  and  British 
.Airways  at  the  top  of  the  list,  rather  than  an  alphabetical  list  which  leads  off  with  Adna 
Airways,  the  national  airline  of  Slovenia,  followed  by  Aer  Lingus,  Aerocanbe,  and  Aeroflot. 

You  can  also  restrict  your  search  to  specific  categories  By  default,  when  you.  perform 
a  search  from  within  the  directory,  your  search  will  be  restricted  to  search  only  the 
pages  from  the  category  you  are  searching  in,  and  all  of  its  subpages.  The  Google  direc- 
tory also  suggests  "related  categories"  that  contain  similar,  though  not  directly  related 
content  to  the  current  category. 

"The  ODP  has  very  useful  information,"  says  Sergey  Bnn,  President  of  Google.  "But  it's 
tedious  to  browse.  So  we  put  our  technology  on  top"  to  make  it  far  easier  to  get  pinpoint 
results.  If  you're  a  fan  of  Google's  search  engine,  you'll  love  the  Google  Directory. 

— Chris  Sherman 


scaled  back,  shifting  focus  from  being 
a  general-purpose  portal  to  concen- 
trate instead  on  the  far  more  limited 
"entertainment  content,"  presumably 
more  important  to  the  parent  com- 
pany. The  ODP  enjoys  autonomy  now, 
but  it's  part  of  a  parent  company  that 
continues  to  grow,  refine,  and  impor- 
tantly, discard  business  ideas  when 
they  are  no  longer  meaningful  to  the 
overall  business  model. 

The  other  major  challenge  the  ODP 
faces  is  in  scaling  up  with  the  explo- 
sive growth  of  the  Web.  This  is  no 
easy  task,  even  for  powerful  spider- 
compiled  search  engines,  let  alone  a 
directory  that  relies  on  the  relatively 
pokey  pace  of  humans  to  catalog  the 
Web.  Again,  Tolles  is  confident  that 
the  ODP  is  up  to  the  challenge.  "Our 
mission  is  to  build  the  most  compre- 
hensive directory  of  the  Web,  and  it's 
a  cop  out  (or  an  admission  of  a  failed 
model)  to  not  have  your  directory  use- 
ful for  the  ever  increasing  scale  of  the 
Web,"  says  Tolles.  To  help  accom- 
plish this  goal,  several  infrastructure 
improvements  to  the  back  end  of  the 
directory  are  being  made,  together 
with  continual  improvements  for  the 
tools  used  by  editors  to  maintain  the 
directory.  These  improvements  "will 
keep  quality  high,  but  improve  the 
efficiency  of  the  system,  which  will 
help  scale  the  project,"  says  Tolles. 

Given  the  ODP's  phenomenal  suc- 
cess and  its  demonstrated  ability  to 
overcome  obstacles  that  have  tripped 
up  larger,  more  established  rivals, 
it's  probably  a  safe  bet  that  the  ODP 
will  not  only  weather  the  challenges 
to  its  continued  success,  but  will 
thrive  as  it  assumes  its  rightful  place 
with  the  major  players  in  the  world 
of  Web  Search. 


Chris  Sherman  twcbscarch.Kuidc@about.iam 
or  cshcrman@scarchwisc.ncl i  is  the  Web 
Search  Guide  for  About.com,  http://websea.rch. 
about.com.  He  holds  an  MA  from  Stanford 
University  in  Interactive  Educational  Tech- 
nology and  has  worked  in  the  Internet  I 
Multimedia  industry  for  two  decades,  currently 
as  President  of  Searchwisc.net,  a  consulting 
firm  specializing  in  search  engine  optimiza- 
tion and  training. 

Comments?  Email  Letters  to  the  Editor  to 
cditor@onlineinc.com. 
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By  Leslie  Beyer 


FOR  WHOSE  EYES 

Privacy  fears  lead  some  e-retailers  to  open  up  about  information  they 
collect.  But  personalized  shopping  remains  as  important  as  ever. 


To  understand  how  far  Internet  privacy  has  climbed 
on  the  agendas  of  e-retailers,  consider  that 
Garden.com  recently  tripled  the  size  of  its  "privacy 
pledge,"  detailmgln  three  pages,  instead  of  one,  how  it 
collects  and  uses  customer  information.  "We  wanted  to 
make  sure  that  it  was  as  clear  as  possible  that  we  do  not 
gather  any  information  that  customers  are  unaware  of," 
says  Wendy  Carter,  marketing  manager  of  the  Austin, 
Texas-based  site.  "It  is  explicitly  asked  for." 

What's  also  explicit  is  the  careful  balance  e-retailers 
must  strike  between  consumer  demand  for  personalized 
shopping  and  their  concerns  about  privacy.  According  to 
e-commcrce  consulting  firm  Jupiter  Communications  of 
New  York,  more  than  80%  of  Web  sites  personalize 
content  for  their  visitors,  whether  based  on  previous 
shopping  or  from  surveys.  Not  surprisingly,  most  consumers 
like  it  when  sites  pay  attention  to  their  interests  and  needs, 
with  more  than  70%  saying  they  want  customized  pages. 
But  the  recent  uproar  over  now-shelved  plans  by  ad- 
serving  network  DoubleClick  to  create  consumer  profiles 
shows  there  are  strict  limits  that  consumers  place  on 
information  gathered  about  their  online  activities — and  a 
whole  lot  of  anxietv  about  being  watched  at  all. 

"There  are  really  very  few  merchants  out  to  'e-screw' 
their  customers  by  doing  malicious  things  with  their  inform- 
ation," notes  Bonnie  Lowell,  founder  and  chief  technology 
officer  of  YOUpowered,  a  New  York  company  that  provides 
free  consumer  and  e-business  privacy  software.  "But  it's 
frightening  that  we're  living  in  a  time  where  thousands  of 
businesses  will  suddenly  band  together  and  collect 
information  about  you  and  share  it  with  one  central  source," 
Lowell  adds.  "That's  why  the  privacy  issue  has  escalated  as 
fast  as  it  has.  That's  why  people  are  arming  themselves." 

C[      Internet  Retailer 


Companies  such  as  Microsoft  have  introduced  tools 
that  give  consumers  more  control  over  how  much 
personal  information  they  divulge.  Using  new  standards 
known  as  the  Platform  for  Privacy  Preferences,  or  P3P, 
consumers  will  be  able  to  translate  complicated  privacy 
policies  and  help  squash  "Web  bugs"  that  surreptitiously 
track  online  behavior. 

Data  anxiety 

Though  Garden.com  did  not  keep  an  official  count  or 
track  hits  to  its  privacy  page,  according  to  Carter,  the 
customer  service  department  steadily  fielded  calls  from 
customers  wanting  to  clarify  how  the  site  uses  the  data  it 
gathers  about  them.  The  revised  pledge  is  wordier,  but 
there's  no  fine  print.  It  begins  by  describing  the  benefits 
for  customers  who  register  with  the  site,  such  as: 
receiving  previews  of  sales  and  promotions,  designing  a 
garden  with  its  free  Garden  Planner  software,  asking 
questions  of  its  Garden  Doctors  and  receiving  customized 
regional  gardening  information." 

The  policy  then  lays  out  the  basics — discussing  how 
the  site  ensures  that  orders  and  credit  card  numbers  are 
kept  secure,  defining  digital  ID  tags  better  known  as 
cookies  and  how  the  site  uses  them,  and  promising 
customers  that  data  is  never  sold  or  shared,  not  even  with 
its  partners  iVillage,  America  Online  and  Excite@Home. 
Carter  says  this  is  merely  Garden. corn's  disclosure  that  its 
customer  profiles  and  survey  data  are  all  about  making 
the  site  a  better  and  more  personal  place  to  shop.  "We  do 
it  to  provide  customers  with  a  landscape  of  ideas  and 
information  about  plants  suitable  for  their  area  of  the 
country,"  she  says  of  creating  customer  profiles.  "It  helps 
us  better  personalize  the  relationship.  That  means  we 
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have  to  understand  what  kind  of  gardener 
they  are,  where  they  live  and  what  the 
conditions  of  their  backyards  are." 

Knowing  the  condition  of  your 
customer's  backyard,  bookshelves  or  clothes 
closet  is  the  mother  lode  of  direct  marketing — 
and  it's  what  makes  Internet  retailing  so 
promising.  Some  of  the  most  visited  e-retailers, 
such  as  Amazon,  CDnow  and  Lands'  End, 
were  built  on  the  foundation  of  knowing 
their  customers'  search  patterns  and  interests 
better  than  physical  stores  and  catalogers. 

But  personalization  has  its  detractors, 
and  one  of  them  is  suspicion.  Some 
consumers  are  shocked  to  learn  that  any 
information  is  gathered  about  them  at  all.  Others  are 
'already  on  their  guard,  convinced  that  every  click  is  being 
recorded.  Because  so  much  online  activity  can  be  tracked, 
the  privacy  controversy  is  always  at  issue. 

Amazon,  through  its  acquisition  of  Alexa  Internet  and 
its  use  of  the  company's  zBubbles  comparison  shopping 
tool,  also  has  entered  the  privacy  fray.  Five  class-action 
suits  allege  that  Alexa  collects  more  information  from  its 
users  than  company  executives  have  acknowledged.  Alexa 
savs  zBubbles  collects  Web  traffic  and  usage  data  anony- 
mously but  plaintiffs  claim  the  service  tracks  full  Web 
addresses  and  query  strings  that  might  include  names, 
addresses  and  other  personal  information. 

Most  Web  retailers  are  relying  on  their  privacy 
policies  to  promote  consumer  trust.  A  report  released  by 
Enon\Tnous.com,  a  company  that  rates  privacy  policies  and 
hosts  privacy  and  personalization  applications,  shows  that 
nearly  two-thirds  of  the  top  1,000  Web  sites  post  a 
privacy  policy,  compared  with  the  FTC's  1998  survey  of 
1,400  sites,  which  found  only  2%  did. 

Personalization  first 

If  you're  a  cookie  disabler,  don't  bother  shopping  at 
Beautyjungle.com,  according  to  the  company's  privacy 
policy.  "Our  system  is  a  little  rigid,"  concedes  Lars  Kry,  vice 
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president  of  marketing.  "We  haven't  had  any  complaints 
about  it  that  I  am  aware  of,  but  I  think  people  who  are 
opposed  to  the  policy  choose  not  to  shop  on  our  site." 

Kry  says  Beautyjungle  puts  a  heavy  focus  on  personal- 
ization to  help  distinguish  itself  in  the  crowded  cosmetics 
category  and  assigns  cookies  to  compile  customer 
profiles.  To  coax  customers  to  hand  over  the  information, 
Beautyjungle  runs  sweepstakes  that  can  pay  out  a  prize  of 
$22,000  in  cash  and  gift  certificates  for  up  to  £500. 
Customers  who  enter  must  fill  out  a  beauty  profile  first. 
Kry  says  this  allows  the  company  to  understand  its 
customers  and  to  better  cross-sell  and  recommend 
products  based  on  hair,  eye  and  skin  color. 

"Cookies  arc  extremely  important  for  this  process 
because  they  enable  us  to  personalize  the  shopping 
experience  for  the  consumer,"  he  explains.  "But  how  you 
use  that  information  is  a  different  question — perhaps  an 
ethical  one.  I  don't  think  Beautyjungle  is  violating  privacy 
rights  by  the  way  we  use  customer  information  today." 

Krv  also  emphasizes  the  company  won't  sell  its  data 
to  anyone.  "We  are  adamant  about  that,"  he  says.  "It  is  very 
important  that  in  the  long  run  we  build  trust  with  our 
customers,  and  that  transcends  everything  we  do."  But 
Beautyjungle's  privacy  policy,  which  is  buried  deep  at  the 
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bottom  of  the  site's  home  page  and 
easy  to  miss,  says  something  different. 
While  explaining  what  customer 
information  is  gathered  and  used  for, 
the  policy  says  aggregate  customer 
information  may  be  released  to 
"reputable  third-party  vendors."  It 
also  goes  on  to  say  that  currendy 
Beautyjungle  does  not  "sell,  trade, 
give  away  or  rent  your  personal 
information  to  others.  We  may 
decide  to  do  so  with  trusted  third- 
party  partners  in  the  future." 

Kry  says  the  site's  customers 
haven't  shown  tremendous  concern 
over  privacy,  but  he  acknowledges 
that  even  one  concern  is  too  many. 
"We  have  to  keep  asking  ourselves  are 
we  doing  enough?" 

CDnow  waits  it  out 

Despite  the  recent  surge  of  privacy 
concerns,  CDnow  executives  say  they'll 
wait  and  see  where  the  issue  goes 
before  considering  changes  to  their 
current  policy  and  how  it  is  displayed. 
According  to  CDnow  executives,  the 
controversies  at  DoubleClick  and 
Amazon  had  little  spill  over  to  their 
customers.  And  without  such  an 
uptick  in  calls  or  e-mails,  the  site  has 
no  plans  to  review  its  policy  or 
display  it  more  prominendy 

Like  Beautyjungle's  policy, 
CDnow 's  is  accessible  via  a  link  dis- 
played at  the  bottom  of  the  home 
page.  The  policy  itself  runs  only  five 
paragraphs,  but  clearly  maintains  that 
the  company  will  not  rent  or  sell  cust- 
omer information  without  permission. 
Like  other  sites,  CDnow  shares 
aggregated  information  to  third-parties, 
but  the  policy  does  not  go  into  detail. 

As  for  tracking  where  its 
customers  go  on  the  site,  CDnow  is 
selective  about  doling  out  cookies,  says 
Russ  Cherry,  the  site's  vice  president 
of  Internet  technology'.  Customers 
who  register  for  an  automatic  log-in 
are  assigned  a  cookie,  but  they  can 


shop  freely  on  the  site  if  they  disable 
the  function.  Only  customers  who 
have  opted-in  for  special  offers  and 
promotions  receive  any  type  of 
personalization  or  recommendations. 
"As  far  as  our  marketing  campaigns 
and  the  segmentation  we  do  offer  our 
customer  base,  we  get  that  off  the 
preferences  and  the  e-mail  programs 
that  customers  sign  up  for,"  Cherry 
explains.  "The  only  additional  thing 
we  do  is  that  customers  are  able  to 
identify  their  favorite  artists  and  that 
can  be  used  as  part  of  our  segment- 
ation criteria  for  e-mail  campaigns. 
But  it  is  all  information  that 
customers  have  actively  given  us." 

Despite  the  emphasis  on 
privacy  policies,  many  sites  don't  post 
one  at  all — a  whopping  77%  of 
30,000  well-trafficked  sites,  says 
Enonymous.com.  According  to  the 
Personalization  Consortium,  an 
international  advocacy  group  that 
promote  responsible  one-to-one 
marketing  on  the  Web,  58%  of  Web 
users  require  a  privacy  statement 
before  sharing  information  and  51% 
read  the  privacy  statement  before 
registering  on  a  site. 

Michele  Slack,  analyst  with 
Jupiter  Communications,  contends 
that  few  consumers  bother  to  read 
privacy  policies.  Plus,  it  takes  more 
than  a  good  policy  to  persuade 
consumers  to  give  up  personal 
information.  "Consumers  aren't  used 
to  being  tracked,  and  they  don't  like 
it,"  Slack  says.  "For  the  most  part, 
when  you  buy  something  in  a 
physical  store,  nobody  is  tracking 
you.  Nobody  is  watching  to  see  what 
you  buy.  There  is  no  record  tying  you 
to  the  purchase  you  make." 

What  retailers  can  do  she  says, 
is  offer  some  value  to  customers  in 
'  return,  such  as  customized  welcome 
messages,  access  to  members-only 
areas,  content  designed  especially  for 
them,  information  about  site  events 


and  developments,  and  targeted 
advertising.  The  important  thing, 
experts  agree,  is  to  show  consumers 
they  are  truly  getting  a  benefit  from 
the  information  they  provide. 

Browsers,  never  buyers 

If  retailers  don't  address  the  privacy 
issue,  Slack  and  others  maintain, 
consumers  who  only  research  products 
online  will  never  become  buyers. 

Various  federal  lawmakers  are 
taking  action  by  introducing  a  slew  of 
privacy  bills  that  would  regulate  the  use 
of  personal  inform-ation,  data  profile 
appending  and  assigning  of  cookies.  For 
example,  Rep.  Bruce  Vento  (D-MN)  is 
sponsoring  HR  313,  the  Consumer 
Internet  Privacy  Protection  Act  of  1999, 
which  would  give  the  FTC  investigative 
and  enforcement  authority  and  would 
prohibit  commercial  Web  sites  from 
disclosing  personally  identifiable 
information  without  written  consent. 

Web  companies  argue  that  such 
regulation  would  strangle  the  entre- 
preneurial spirit  of  the  Internet.  "The 
thing  that  makes  the  Internet  so 
dynamic,  so  exciting  and  the  ultimate 
in  fair  marketplace  is  this  non- 
regulated  aspect,"  says  Beautyjungle's 
Kry.  "But  on  the  other  hand,  the 
potential  for  abuse  is  there.  Maybe 
there  should  some  minimum 
regulation  to  protect  the  consumer 
from  any  abuses  that  might  occur." 

Until  there  are  clear  universal 
policies,  others  arc  left  to  question 
the  ability  of  the  Web  to  be  self- 
regulating.  "Because  of  the  amount  of 
information  that  is  available  and  the 
amount  of  publicity  from  the  media 
that  surrounds  the  Internet,  we  have 
smarter  consumers  than  we  have  ever 
seen,"  says  YOUpowered's  Lowell.  "So 
their  fear  of  what  happens  with  their 
information  on  the  Web  will  start  a 
movement  toward  self  regulation.  If  a 
retailer  isn't  respecting  its  customers 
privacy,  their  competitor  will."  • 
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Web  News  Sites  Fail  to  Click 

■  Internet  media  have  millions  of  viewer-readers,  but  few  of  the  players  in  the 
crowded  field  have  figured  out  how  to  turn  a  profit.  Competition  for  ad  dollars  is 
brutal. 

By  CHARLES  PILLER,  Times  Staff  Writer 

Online  journalism,  with  its  immediacy  and  low  cost  of  distribution,  was  by 
now  supposed  to  be  on  the  road  to  burying  the  print  dinosaurs  and  overtaking  the 
TV  broadcast  titans. 

Evidence  of  the  online  journalists'  ambitions  is 
everywhere  around  the  Staples  Center  in  Los  Angeles 
this  week.  Scores  of  new  Web  sites  occupy  colorful 
booths  at  the  Democratic  National  Convention's  "Internet 
Avenue."  Several  have  even  leased  sky  boxes.  Hundreds 
of  energetic  online  writers  and  video  producers  race 
hourly  to  their  computers  to  update  the  latest  bit  of  unrest 
or  comment  on  the  political  scene. 

But  even  as  they  beat  the  traditional  media  with 
constantly  refreshed  stories  and  images,  a  different 
verdict  is  emerging  on  whether  many  of  today's  Web 
sites  will  exist  to  cover  the  next  convention.  Despite 
millions  of  viewer-readers,  almost  none  of  the  World 
Wide  Web's  roughly  32,000  news  sites  earn  a  profit.  And 
there  is  little  prospect  that  will  change  in  the  foreseeable 
future. 

Even  prominent,  journalistically  excellent  news  sites 
have  seen  their  fortunes  take  a  nose  dive: 

•  In  June,  CBS  laid  off  a  quarter  of  its  Internet  staff. 
NBC  Internet  followed  suit  last  week  with  1 70  layoffs. 

•  Salon.com,  a  popular  and  innovative  Internet 
magazine,  fired  13  staffers  in  June-including  the  founder  and  editor's  wife~to 
slow  its  perilous  "burn  rate"  of  cash  reserves.  Salon  raised  $26.3  million  a  little 
over  a  year  ago  by  selling  stock  to  the  public;  now  $15.6  million  remains  after  it 
posted  a  $4.6-million  net  loss  in  its  last  quarter.  Its  stock,  meantime,  which  had 
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risen  as  high  as  $15.13  a  share,  is  trading  for  $2. 

•  Stock  prices  for  Salon.com,  NBC  Internet,  TheStreet.com,  CNet, 
Sportsline.com  and  Marketwatch.com,  among  the  few  Web  news  companies 
whose  shares  are  traded  publicly,  have  plummeted  an  average  of  77%  since  last 
fall. 

•  The  Wall  Street  Journal's  Internet  site,  which  has  attracted  an  almost  unheard 
of  461,000  paying  subscribers,  has  lost  money  in  all  but  one  month  of  its  five 
years  of  operation. 

•  APBnews.com,  an  award-winning  crime-reporting  site,  raced  through  $33 
million  in  cash  in  less  than  two  years  before  it  fired  all  140  of  its  employees  in 
June  and  filed  for  bankruptcy  protection  in  July. 


It  Was  Great  While  It  Lasted 

Amy  Worden,  37,  a  former  reporter  for  the  Washington  Post  and  Associated 
Press,  was  among  the  APBnews  casualties. 

She  called  her  year  there  "the  best  job  I  ever  had. 
Not  because  anyone  made  a  fortune,  but  we  all 
thought  we  were  working  for  something  together-a 
common  goal,  a  common  spirit." 

But  Worden  vows  never  to  go  back  to  a  Web  start- 
up. 

"It's  a  big  risk,  and  you  fall  hard.  It's  just  been 
agonizing,"  she  said. 

Until  recently,  print  executives  worried  that 
Internet  media  were  about  to  consume  their  profitable 
classified  ads,  lure  away  top  talent  with  lucrative 
stock  options  and  seduce  readers  with  flash  and 
novelty. 

The  American  Society  of  Newspaper  Editors 
asked  technology  wizard  Andrew  Grove,  chairman  of 
microprocessor  giant  Intel  Corp.,  for  advice. 
Speaking  at  the  organization's  1 999  annual 
convention,  Grove  warned  that  unless  they  retooled 
to  compete  with  the  online  explosion,  newspapers 
had  three  years  before  beginning  an  irreversible  slide 
into  irrelevance.  "Nothing  sharpens  the  awareness  of  a  situation  like  the  sight  of 
the  gallows,"  he  warned. 

Traditional  media  companies  took  the  point  and  have  been  posting  news 
stories,  radio  reports  and  video  streams  on  their  own  Web  sites.  They  also  have 
been  scrambling  to  hook  up  with  Internet  companies,  as  seen  in  the  watershed 
merger  pending  between  America  Online  and  Time  Warner. 

Yet  few  such  ventures  have  demonstrated  a  plausible  business  model  for 
making  money  from  online  journalism  any  time  soon.  Even  the  most  savvy 
technology  companies  have  yet  to  solve  this  puzzle. 

In  1996,  Microsoft  bankrolled  Slate,  one  of  the  earliest  Web-only 
newsmagazines.  The  software  giant  installed  top  magazine  journalist  Michael 
Kinsley  at  the  helm. 

After  abortive  efforts  to  sell  online  subscriptions  and  even  a  printed  version, 
Slate  acquiesced  to  the  plan  of  nearly  all  other  Web  media:  offer  stories  for  free 
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and  hope  to  make  up  the  cost  with  Internet  advertising.  Slate  has  since  gained  a 
sizable  following,  with  1 .7  million  monthly  users  in  June,  according  to  the  Web 
rating  service  Media  Metrix. 

"Frugality,  more  than  Microsoft's  deep  pockets,  has  brought  us  to  the 
threshold  of  financial  success,"  Kinsley  said,  noting  Slate's  relatively  modest 
staffing.  Yet  Slate  is  still  in  the  red,  with  losses  of  "less  than  $10  million  a  year," 
with  profitability  yet  to  be  projected. 

Microsoft  also  joined  with  NBC  to  create  a  major  cable  and  Internet  company. 
MSNBC.com  attracts  one  of  the  largest  audiences  of  any  Internet  news  site,  but 
has  been  forced  to  delay  plans  to  sell  its  stock  to  the  public,  given  the  disastrous 
year  for  Internet  stocks.  Likewise,  plans  by  Dow  Jones  Co.  (publisher  of 
WSJ.com)  and  the  New  York  Times  Co.  to  issue  separate  stock  offerings  for  their 
Internet  properties  have  stalled. 

Dreamers  Awake  to  a  Cold  Reality 

To  be  sure,  many  journalism  sites  have  fallen  victim  to  the  Internet-economy 
binge  and  purge:  Investors  pumped  billions  of  dollars  into  start-ups  with  few 
plans  beyond  gaining  a  large  audience  through  marketing.  The  dreamers  awoke 
early  this  year  as  worries  over  soaring  losses  in  all  manner  of  Internet  firms  sent 
stocks  plummeting,  which  then  dried  up  capital  markets,  forcing  good  companies 
and  bad  to  retrench. 

In  the  process,  many  journalists  lost  their  illusions  for  the  Internet-including 
hope  for  riches  in  what  has  traditionally  been  a  labor  of  love. 

Howard  Witt,  40,  a  plain-speaking  veteran  foreign  correspondent  and  editor 
with  the  Chicago  Tribune,  began  a  hard-knocks  Web  media  education  in  1997. 

The  Tribune  (whose  parent  company  owns  the  Los  Angeles  Times)  tapped 
Witt  to  edit  a  Web  version  of  the  newspaper.  As  the  paper  ramped  up  online 
offerings,  tensions  grew  in  a  manner  now  familiar  to  mainstream  news 
organizations. 

Web  site  executives  didn't  understand  journalism,  and  "the  newspaper  was 
often  reluctant  to  aggressively  promote  the  Web  site  and  to  integrate  the  site  into 
daily  operations,"  Witt  said.  "It  put  me  at  odds  with  many  of  the  leaders  of  the 
newspaper." 

He  left  after  two  years  of  frustration. 

Witt  landed  at  Brill's  Content,  the  media-criticism  magazine,  taking  over  its 
Web  operations. 

"Unfortunately,  when  I  got  there,  it  immediately  became  clear  that  [founder 
Steven]  Brill  wasn't  going  to  spend  any  resources  on  the  Web  site,"  he  said. 

Witt  lasted  a  few  months,  then  spent  an  equally  brief  interlude  at  a  Web  start- 
up that  never  took  off.  He  is  now  editor  of  the  Washington  City  Paper,  a  free 
weekly  newspaper  in  the  nation's  capital. 

"I  learned  some  hard  lessons,"  he  said.  "You've  got  a  lot  of  people  dabbling  in 
this  without  any  real  idea  how  they  are  going  to  make  a  business  of  it." 

Witt  added:  "There's  no  way  I  will  ever  go  back  to  another  Internet  job.  You 
can't  pay  me  enough  salary,  give  me  enough  [stock]  options  or  vest  me  fast 
enough." 

Intense  Scramble  for  the  Ad  Dollar 

Such  stories  have  become  typical  as  the  Web  news  media  struggle  with 
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daunting  business  problems. 

The  first  is  learning  to  survive  by  depending  on  Internet  advertising,  which 
sounds  easy  at  first. 

Total  Web  ad  revenues  have  risen  spectacularly,  from  virtually  zero  in  1995  to 
$4.6  billion  in  1999,  and  $2  billion  in  the  first  quarter  of  this  year,  according  to 
PricewaterhouseCoopers.  And  the  New  York  merchant  bank  Veronis  Suhler 
projects  annual  Internet  ad  revenues  to  reach  $24.4  billion  by  2004-boosting  the 
Web  above  all  other  media  except  newspapers,  TV  and  radio. 

But  competition  for  those  Internet  ad  dollars  is  intense.  Today  there  are  more 
than  1.4  billion  Web  pages  of  all  sorts,  according  to  the  Web  navigation  company 
Alexa  Internet.  Media  sites  fight  for  every  "eyeball"  against  major  Internet 
service  providers  and  portals  such  as  AOL  and  Yahoo— which  maintain  hugely 
popular  news  sections—as  well  as  thousands  of  specialized  sites— from 
Women.com  to  Christianportal.com— with  their  own  news  links,  plus 
government,  university  and  library  sites. 

Buyers  of  advertising  seem  to  have  thrown  up  their  hands  at  this  information 
overload.  Just  8%  of  Web  ad  dollars  go  to  news  and  information  sites,  only  a 
handful  of  which  are  in  the  top  50  that  receive  95%  of  all  ad  revenues, 
researchers  say. 

Then  there  are  the  other  media  competitors-some  20,000  magazines,  10,000 
newspapers,  hundreds  of  TV  programs. 

Under  such  circumstances,  "the  prospects  of  the  broadcast  [TV]  business  as 
we  know  it  are  probably  going  to  be  superior  to  any  Web-based  content  venture 
forever,"  said  Peter  Appert,  a  media  analyst  with  the  investment  bank  Deutsche 
Banc  Alex.  Brown. 

Witt  predicts  that  few  newspaper  Web  sites  will  ever  turn  a  profit.  "Any  Web 
site  that  does  not  treat  content  as  a  loss  leader  is  doomed  to  fail  economically,"  he 
says.  "They've  got  the  loss.  Where's  the  leader?" 

News  Web  sites  also  face  a  readability  problem.  Most  people  find  the 
computer  screen  tiring  for  reading  more  than  snippets.  Web  "surfer"  is  no 
misnomer;  users  are  notoriously  impatient,  switching  sites  rapidly  and  avoiding 
longer  articles. 

On  average,  home  users  of  Web  news  media  spend  only  half  a  minute  per  day 
for  online  news,  according  to  Nielsen/NetRatings,  which  gathers  data  from 
1 50,000  individuals  in  eight  countries.  By  comparison,  the  average  time  spent 
with  a  daily  newspaper  is  25  minutes,  according  to  Veronis  Suhler. 

So  while  Internet  audiences  may  be  huge,  most  attention  spans  are  short-and 
divided.  According  to  a  recent  survey,  a  quarter  of  the  American  public  watches 
TV  and  surfs  the  Web  simultaneously. 

With  news  as  a  commodity,  sites  struggle  to  differentiate  their  offerings.  Witt 
concluded  that  to  casual  Web  users,  a  quick  Reuters  wire  service  story  on  a  plane 
crash  disaster,  found  on  any  of  a  thousand  sites,  looks  the  same  as  a 
comprehensive  report  on  a  major  newspaper's  Web  site. 

The  problem  is  worsened  by  constant  pressure  to  keep  a  news  site  fresh  with 
limited  staff.  Editing  can  be  light,  and  quality  suffers.  "[Web  news]  often  depends 
more  on  tone  of  voice  [or]  wit . . .  than  thoughtfulness,  development  and  insight," 
said  Orville  Schell,  dean  of  the  Graduate  School  of  Journalism  at  UC  Berkeley. 

A  Banner  Year  for  Print  Media 
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Meanwhile,  although  most  newspaper  company  Web  sites  lose  money  by  the 
bushel,  their  newsprint  products  are  enjoying  a  banner  year,  with  ad  revenues  and 
profits  soaring  at  large  and  small  papers  alike.  Ironically,  part  of  the  ad  boost  has 
come  from  massive  advertising  bought  by  "dot-coms"  desperate  to  build  brand 
recognition. 

Although  many  media  company  sites  may  survive  as  break-even  necessities  of 
the  Internet  Age,  "except  in  a  few  rare  cases,  the  idea  that  anyone  will  make 
money  from  selling  news  on  the  Web  is  laughable,"  said  Barry  Parr,  an  analyst 
with  International  Data  Corp. 

One  such  rarity  may  be  the  Wall  Street  Journal's  online  edition. 

WSJ.com  has  managed  a  remarkable  feat  for  the  Web:  Readers  pay  for  it. 
Subscribers  shell  out  $29  to  $59  annually,  with  a  51%  jump  in  subscribers  in  the 
last  year. 

Analysts  say  that  WSJ.com  sells  well  because  it  offers  unique  content  from  a 
trusted  brand  operating  in  a  lucrative  niche.  (Among  consumer  publications,  only 
Consumer  Reports  and  Playboy  magazine  have  been  able  to  sell  a  meaningful 
number  of  online  subscriptions.) 

With  its  paid  subscribers,  WSJ.com  can  charge  a  premium  for  ads  despite  a  far 
smaller  audience  than  other  major  media  sites,  said  Gordon  Crowitz,  senior  vice 
president  of  Dow  Jones.  The  online  Journal  took  in  60%  of  its  $12.1  million  in 
revenue  in  the  last  quarter  from  ads,  40%  from  subscriptions. 

Yet  even  WSJ.com  is  not  profitable. 

Parr  believes  that  Dow  Jones  may  be  squandering  a  chance  to  dominate 
financial  news. 

"If  they  took  the  [subscription]  shackles  off,  they  could  be  a  monster,"  he  said. 
"They  have  a  nice  little  business,  but  no  bigger  than  a  third-string  daily  paper 
[right  now]." 

If  it  were  free  and  millions  of  affluent  consumers  came  to  rely  on  its  content, 
Parr  said,  Dow  Jones  could  ultimately  make  much  more  money  on  ads  and 
commercial  tie-ins. 

Most  Internet  media  start-ups  seem  to  be  counting  on  two  saviors  to  boost 
traffic  and  the  potential  for  profits:  new  technology  and  tech-sawy  kids. 

According  to  a  poll  by  the  Pew  Research  Center  for  the  People  and  the  Press, 
less  than  a  third  of  young  adults  read  a  daily  paper— yet  half  of  them  go  online  for 
news  at  least  weekly. 

Meanwhile,  development  is  racing  ahead  on  ultra-fast  wireless  networks  in 
which  text,  sound  and  video  will  be  instantly  accessible  from  cell  phones,  hand- 
held PCs  and  other  devices.  Media  sites  hope  this  will  dramatically  boost  their 
use-along  with  advertising  and  syndication  revenues. 

"Once  there  are  screens  you  can  take  to  the  John  ...  all  [media  companies 
will]  be  content  providers,  and  the  platform  will  be  up  to  the  customer,"  said 
Slate's  Kinsley.  "That's  the  standard  Internet-vision  b.s.,  but  it's  really  true." 

With  Microsoft's  endless  resources,  Slate  might  live  long  enough  to  see 
Internet  content  become  the  centerpiece  to  a  thriving  business.  But  hundreds  of  e- 
journalism  sites  operating  on  an  APBnews  business  plan  certainly  will  not. 

Yet  for  many,  an  abiding  faith  in  some  kind  of  online  future  seems  impervious 
to  today's  business  meltdowns. 

For  Hoag  Levins,  a  30-year  news  veteran  and  part  of  a  skeletal  staff  rehired 
for  now  as  APBnews.com  seeks  to  emerge  from  bankruptcy,  there's  no  looking 
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back.  If  his  company  folds,  he'll  find  another  dot-com  job. 

"I  really  see  the  Web  and  the  Internet  as  the  future  of  all  media,"  he  said. 
"Twelve  months  from  now,  you'll  see  a  whole  series  of  other  sites  that  [will 
demonstrate]  journalism  will  be  a  success  on  the  Internet." 

Copyright  2000  Los  Angeles  Times 
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Competition  is  fierce  for  Internet 
advertising 


by  Los  Angeles  Times 

The  Web  news  sites  struggle  with  daunting  business 
problems. 

The  first  is  learning  to  survive  by  depending  on  Internet 
advertising,  which  sounds  easy  at  first. 

Total  Web  ad  revenues  have  risen  spectacularly,  from 
virtually  zero  in  1995  to  $4.6  billion  in  1999,  and  $2  billion 
in  the  first  quarter  of  2000,  according  to 
PricewaterhouseCoopers.  And  the  New  York  merchant  bank 
Veronis  Suhler  projects  annual  Internet  advertising  revenues 
to  reach  $24.4  billion  by  2004  -  boosting  the  Web  above  all 
other  media  except  newspapers,  TV  and  radio. 

But  competition  for  those  Internet  ad  dollars  is  intense.  Today 
there  are  more  than  1 .4  billion  Web  pages  of  all  sorts, 
according  to  the  Web  navigation  company  Alexa  Internet. 
Media  sites  fight  for  every  "eyeball"  against  major  Internet 
service  providers  and  portals  such  as  AOL  and  Yahoo  - 
which  maintain  hugely  popular  news  sections  -  as  well  as 
thousands  of  specialized  sites  -  from  Women.com  to 
Christianportal.com  -  with  their  own  news  links,  plus 
government,  university  and  library  sites. 

Ad  buyers  seem  to  have  thrown  up  their  hands  at  this 
information  overload.  Just  8  percent  of  Web  ad  dollars  go  to 
news  and  information  sites,  only  a  few  which  are  in  the  top 
50  that  receive  95  percent  of  all  ad  revenues,  researchers  say. 

Then  there  are  the  other  media  competitors  -  some  20,000 
magazines,  10,000  newspapers,  hundreds  of  TV  programs. 
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Under  such  circumstances,  "the  prospects  of  the  broadcast 
(TV)  business  as  we  know  it  are  probably  going  to  be 
superior  to  any  Web-based  content  venture  forever,"  said 
Peter  Appert,  a  media  analyst  with  the  investment  bank 
Deutsche  Banc  Alex,  Brown. 
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Specialized  Search  Engines  Carve 
Out  Niches 

(08/10/00,  10:41  a.m.  ET)  By  Cynthia  Flash,  TechWeb  News 

FizzyLab,  a  Seattle  company  that  says  its  new 
search  relevancy  technology  will  take  searching 
Internet  sites  to  a  new  level,  never  expects  to 
become  the  next  Yahoo  or  Alta  Vista. 

This  search  company  instead  will  sell  its  products  to 
websites  that  want  to  help  their  customers  find  what 
they're  seeking. 

News  sites  like  those  of  the  Seattle  Post- 
Intelligencer  and  Denver  Post  are  the  first  to  use 
FizzyLab's  search  technology.  But  users  don't  see  it. 
Instead  they  are  automatically  directed  to  related 
news  articles  categorized  by  FizzyLab  technology. 

FizzyLab,  which  just  named  the  whiz  kid  who 
invented  Metacrawler  as  its  director  of  technology , 
is  among  a  growing  number  of  specialized  search 
technology  companies  that  are  trying  to  capture  the 
hearts  and  eyes  of  frustrated  Internet  users  who  can't 
always  find  what  they're  searching  for. 

Dozens  of  new  search  companies  are  trying  to  carve 
out  a  niche  for  themselves. 

Why.com  ranks  websites  by  popularity  and  returns 
results  based  on  use.  GenieKnows.com,  like 
Dogpile.com,  grabs  results  from  numerous  search 
engines.  And  Google,  which  grabbed  headlines  in 
June  when  Yahoo  (stock:  YHOO)  announced  it 
would  use  it  instead  of  Inktomi  (stock:  INKT)  for 
its  consumer  search  provider,  claims  its  database  of 
more  than  1  billion  Web  pages  is  the  biggest. 

Erik  Selberg,  the  27-year-old  Metacrawler  inventor 
who  joined  FizzyLab  last  month,  said  the  company's 
"Relevator"  technology  is  "like  a  greeter  at  the  store 
asking  'How  can  I  help  you?  Can  I  help  you  refine 
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It  is  similar  to  looking  for  a  book  at  Amazon.com 
(stock:  AMZN)  and  being  shown  other  related 
books.  Eventually,  Fizzy  Lab  hopes  to  target  large 
retail  sites  like  Wal-Mart  and  help  customers 
automatically  find  what  they  are  looking  for, 
Selberg  said. 

Danny  Sullivan,  editor  of  SearchEngineWatch.com, 
said  FizzyLab  falls  into  the  category  of  search 
companies  that  service  individual  websites.  Instead 
of  searching  the  entire  Web,  like  a  Yahoo  or  Excite 
(stock:  ATHM),  FizzyLab  and  others  sell  their 
services  to  sites  that  need  a  search  function. 

Other  search  engines,  like  Google,  Alexa.com,  and 
Autonomy.com,  will  offer  related  searches  on  the 
Web,  he  said. 

But  FizzyLab,  which  charges  its  customers  a  $1,000 
to  $10,000  per  month  service  fee  and  hosts  the 
search  function  on  its  own  servers,  appears  to  be  the 
only  one  offering  its  relevancy  technology  to 
companies  to  use  within  their  own  sites,  Sullivan 
said. 
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Atomz.com  and  Searchbutton.com  are  two  other 
new  companies  that  are  targeting  the  growing  site- 
specific  search  market. 

"Site  search  has  been  difficult  for  people  to  do," 
Sullivan  said.  "You  either  use  free  software  and 
understand  how  to  [do  it  on]  your  own,  or  pay  a  lot 
of  money  and  get  a  solution  that's  been  difficult  to 
install. 


Privacy  statement  "There  are  new  companies  coming  in  that  say,  'you 

don't  have  to  have  any  software,  you  don't  need  to 
install  anything  on  your  new  computers,  we  will 
come  remotely  and  do  it  for  you.'  That's  easy  for 
people  to  do,"  he  said. 

Reach  freelance  writer  Cynthia  Flash  at 
cynthia@flashmediaservices.  com .   a 
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NEW  MEDIA  SHORTS 


NBCi  fires  20  percent  of  its  employees 
NBCi,  the  unprofitable  internet  branch  of  the  TV  network,  is 
eliminating  170  jobs.  The  layoffs  are  part  of  an  overhaul 
orchestrated  by  its  new  CEO,  Will  Lansing.  NBCi  also  will 
scale  back  on  acquisitions  and  unload  some  of  the  brand 
names  it  owns,  such  as  Snap  and  Xoom.  The  job  cuts  leave 
NBCi  leaner  by  20  percent-it  will  have  just  680  employees  by 
the  end  of  the  year.  While  NBCi  may  be  a  money  drain  now, 
the  site,  which  is  47  percent-owned  by  General  Electric's  NBC 
TV  network,  still  plans  to  turn  a  profit  by  2002.  For  the  quarter 
ended  June  30  it  reported  a  net  loss  of  $1 5 1 .9  million  on 
revenues  of  $30.5  million.  But  NBCi  isn't  in  the  poor  house 
yet,  thanks  to  the  $357  million  in  cash  and  $327  million  worth 
of  advertising  and  promotion  available  to  it  from  its  parent 
company.  A  revamped  NBCi  is  expected  to  debut  this  fall. 


Boris  Becker  takes  a  swing  at  the  web 

Tennis  legend  Boris  Becker  is  among  the  backers  of  a  new 
sports  portal  planned  for  launch  in  October  in  Germany.  The 
three-time  Wimbledon  winner,  still  only  32  years  old,  says  he 
is  not  just  putting  his  name  on  the  project,  to  be  called 
Sportgate.de,  but  that  he  is  "involved  and  committed."  It's  not 
a  tennis  site.  Rather,  Sportgate  aims  to  be  a  portal  for 
accessing  info  from  a  wide  range  of  sporting  events— 
everything  from  local  games  to  major  international  events, 
some  of  which  will  be  webcast.  Becker  and  his  partners, 
including  the  26  million-member  German  Sports  Federation, 
may  take  Sportgate  public  within  two  years.  Becker  isn't  the 
only  athlete  getting  in  on  the  web  action:  Recently  retired 
legends  Michael  Jordan,  Wayne  Gretzsky  and  John  Elway 
launched  an  e-commerce  site,  MVP.com,  earlier  this  year. 


Will  the  real  web  queen  please  stand  up? 

Mirror,  mirror,  on  the  wall,  who's  the  most  downloaded  of 
them  all?  Maybe  Danni  Ashe.  She's  the  president  and  main 
attraction  of  adult  site  Danni's  Hard  Drive.  According  to  an 
Alexa  Research  study  she  commissioned~a  study  that  looked 
at  the  most  popular  web  sites  run  by  and  featuring  women— 
Ashe's  buxom  boudoir  shots  have  been  downloaded  more  than 
841  million  times  since  February  1996.  Alexa  analysts  looked 
at  Ashe's  FTP  logs  for  the  past  four  years  to  arrive  at  the 
figure.  If  the  numbers  stack  up,  it  means  she's  the  most 
downloaded  and  sought-after  woman  on  the  internet-just 
ahead  of  media  empress  and  talk  show  host  Oprah  Winfrey 
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and  domestic  arts  doyenne  Martha  Stewart.  According  to  the 
data,  she  also  unseats  pinup  Cindy  Margolis,  currently  the 
world's  "Most  Downloaded  Woman,"  according  to  the 
Guinness  Book  of  World  Records.  Meanwhile,  the  Guinness 
Book  is  reviewing  Ashe's  data  to  confirm  her  claim. 

Net  reported  to  encourage  disease  fakers 
While  the  web  has  long  been  touted  as  a  medium  which  can 
help  people  with  health  problems  find  information  and 
support,  it  has  also  become  a  new  vehicle  for  people  who  like 
to  feign  serious  illness  for  attention,  a  condition  known  as 
Munchausen  Syndrome.  Also  blossoming  online  is 
Munchausen  by  proxy,  which  is  when  a  person,  typically  a 
parent,  invents  or  even  provokes  symptoms  in  another  person, 
usually  a  child,  also  for  the  attention  and  gratification. 
According  to  a  new  study  from  the  University  of  Alabama,  the 
internet  chat  room  has  become  a  powerful  tool  for  the 
Munchausen-prone.  "Individuals  sometimes  go  online  to 
deliberately  provide  misinformation  about  their  own  medical 
and  personal  histories,"  writes  Dr.  Marc  Feldman,  author  of 
the  study,  in  the  Southern  Medical  Journal.  The  new  problem 
Munchausen  online  introduces  is  distress  among  the 
community  of  people  who  actually  do  experience  the  medical 
problem  the  faker  is  just  pretending  to  have.  They  can  feel 
acutely  victimized  when  the  truth  is  discovered,  which  it  often 
is  over  time  when  inconsistencies  emerge  in  the  phony 
medical  story. 
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Danni  Ashe  Damn's  Hard  Drive 

How  Many  Times  Have  Danni  Ashe  Images  Been  Downloaded? 

Alcxa's  Research 

How  Popular  Is  Danni  Ashe  Compared  To  Other  Stars? 

Fun  Facts 

Officially  The  Most  Downloaded 
Woman  In  The  History  Of  The  Internet 

It's  now  official!  As  of  8/17/00  Danni  Ashe  is  the  Guinness  World  Record 
Holder  for  "Most  Downloaded  Woman". 


Guinness 


Records  official  Btatement 


Images  of  glamour  model  and  business 
woman,  Danni  Ashe,  have  been  downloaded 
from  her  two  web  sites,  www .danai, conn 
and  hotbox.danni.com,  a 


total 
841,271,545  times  between 
February  1996  until  June  2000. 


cf 


This  means  a  total  of  240,165,854 
downloads  in  1999  alone. 


Here  you'll  find  data  which  supports  our  claim,  third-party  research,  an 
online  Video  News  Release,  quotes,  clippings  and  photos.  Please  feel  free 
to  use  this  information  as  you  wish. 

We  hope  you  find  what  you  need  here.  For  more  help,  or  if  you  have  any 
questions,  please  call  Raymond  Forsythe,  212-861-2100  or  Nanette 
Leonard,  732-671-7995. 
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Web's  Most  Wanted  Woman? 

by  Brad  King 


12:00  p.m.  Aug.  8,  2000  PDT 

Move  over  Cindy  Margolis,  there's  a  new  queen  of 
Internet  downloads.  Danni  Ashe,  the  president  of  Danni's 
Hard  Drive,  claims  that  her  picture  has  been  downloaded 
over  841  million  times  in  the  past  four  years,  making  her 
the  No.  1  woman  downloaded  on  the  Internet. 


The  Guinness  Book  of  World  Records  is  currently 
reviewing  Ashe's  data  to  confirm  that  she  is  the  al 
download  diva. 
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Is  'Survivor'  a  Dy i n g 
Species? 

Feds  Set  Sights  on 
Embryos 

Beach  Boys  Fans 
'Smile'  Again 

Clearing  Madonna's 
(Domain)  Name 

A_City_With  a 
Broadband  Future 

Home  Is  Where  the  E- 
Classroom  Is 

Textbook  Wars 
Heating  Up 

Are  You  Webby  for 
Some  Football? 


See  also: 

Danni  Ashe  Does  COPA 

Listen:  to  a  discussion  of  this  story. 


Danni  and  Anne  Petrie,  the  director  of 
technical  operations  at  the  adult 
entertainment  website,  stopped  by 
Wired  News  to  discuss  how  she  got  to 
number  one. 

Wired  News:  We  have  some  news 
coming  today.  Why  don't  you  tell  me  a 
little  about  what  that  is. 

Danni  Ashe:  Today  we  are  releasing 
the  results  of  two  studies.  One  is  a 
study  by  Alexa  Internet,  wherein  they 
looked  at  ail  of  their  May  rankings  and 
examined  websites  being  run  by  and 
featuring  a  woman.  The  results  of  that 
study  are  that  Danni's  Hard  Drive  is  the 
No.  1  such  site,  just  ahead  of  Martha 
Stewart  and  Oprah  Winfrey. 
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WN:  That  kind  of  throws  me  for  a  loop. 
What  about  Cindy  Margolis?  That's  the 
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downloaded  woman  on  the  Internet. 

DA:  Surprisingly  enough,  Cindy  Margolis 
didn't  even  show  up  in  the  rankings.  If 
you  look  at  the  overall  rankings  she 
appears  around  number  7,000. 


WN:  That  is  certainly  news.  You  also 
have  an  internal  study  that  came  up 
with  a  number  that  was  really  big. 

DA:  We  have  also  been  doing  some 
internal  research  on  my  own  Web  server 
logs  ...  and  we  have  determined  that 
over  the  last  four  years,  my  image  alone 
has  been  downloaded  841  million  times 
from  my  own  website. 

WN:  That's  just  from  one  place? 

DA:  That's  just  from  my  website.  That 
doesn't  take  into  account  the  over  20 
news  groups  that  regularly  post  pictures 
of  me,  including  alt.fandanniashe,  at 
least  seven  or  eight  Yahoo  clubs,  and  all 
of  the  websites  that  are  stealing  my 
pictures.  Wherever  it  appears  elsewhere 
isn't  counted. 


X  Markets  the  Sport 

Cashing  In  on  the 
Ejections 

'Honest'  Politics  ...  In 
Web  Art? 

Clinton's  Right-Click 
Woman 

DA:  It's  a  lot.  The  current  Guinness 
Iconoclast  Says  Show,    world-record  holder  I  think  is  at  7 
Don't  Teil  million. 


WN:  Is  there  any  way  to  count  the  other 
stuff  as  well? 

DA:  We  couldn't  come  up  with  any  solid 
way  to  estimate  the  numbers  outside  of 
our  own  servers. 

WN:  841  million  is  still  amazing. 
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WN:  Which  brings  us  to  what  you  are 
going  to  be  doing  with  all  of  these 
numbers. 

DA:  I  have  compiled  information,  our 
study,  several  letters  of  people  of 
standing  with  the  (Web)  community  who 
have  examined  our  results  and  verified 
that  they  appear  to  be  true  and  clear, 
and  agree  with  the  results.  That,  along 
with  the  Alexa  study  we  have  sent  in  to 
the  Guinness  people,  and  we  are  waiting 
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WN:  How  long  are  you  waiting? 

DA:  Well,  they  actually  require  media 
coverage  of  breaking  the  record,  so  we 
have  to  go  out  and  announce  the  fact 
that  we  have  record-breaking  numbers 
and  then  once  they  see  that  media,  they 
grant  the  record,  which  is  a  little  weird. 

WN:  How  can  you  make  sure  that  these 
numbers  are  right?  Eight  hundred  forty- 
one  million  of  anything  is  a  lot  to  count. 

Anne  Petrie:  Actually,  we  started  the 
process  by  compiling  a  list  of  all  of  the 
images  on  our  site  that  have  Danni  in 
them,  which  is  an  incredibly  daunting 
task.  We  had  three  people  working  on 
that.  From  there,  we  took  that  list  of 
images  and  went  back  to  our  FTP  log 
files  and  starting  looking  for  requests  for 
each  of  these  images.  Then  it  was  just 
an  incredible  amount  of  counting  and  we 
were  all  astounded  by  the  number  so  we 
went  back  and  checked  it  a  few  times. 

DA:  The  findings  will  actually  be 
available  for  anyone  to  look  at  and 
review  at 
www.mostdownloadedwornanxom. 

WN:  What  does  this  exposure  do  for 
Danni's  Hard  Drive? 

DA:  Obviously,  I've  been  in  the  media  a 
lot  over  the  last  four  or  five  years.  It's 
good  for  my  business  the  more  people 
know  about  you.  There  is  also  the 
satisfaction  that  all  of  this  work  that  I've 
poured  into  this  business  over  the  last 
five  years  has  really  been  worth 
something. 

WN:  Any  animosity  between  you  and 
Martha  Stewart  over  this  thing? 

DA:  I  don't  know. 

AP:  I  haven't  spoken  to  Martha  yet,  but 
we  haven't  had  a  billion  dollar  IPO  yet 
either. 

WN:  Who  is  the  No.  2  —  if  you  get  rid  of 
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tne  marinas  ana  tne  uprans  —  is  no.  z 
in  terms  of  the  adult  industry? 

DA:  You  know,  Alexa,  for  the  purposes 
of  this  study,  only  went  through  the  top 
1,100  websites  and  in  those  websites, 
only  three  came  out.  Myself,  Martha, 
and  Oprah.  But  I've  gone  through  the 
Alexa  rankings  and  I  know  that 
jennicam  is  pretty  high  up  as  well  as 
Carol  Cox  who  is  a  really  famous, 
amateur  swinger  who  lives  up  in 
Canada. 
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The  goal  is  to  let  posterity 
see  how  the  Internet  grew. 
But  snapshots  of  the  first 
developments  are  rare. 

By  Ashley  Dunn 

LOS  ANGELES  TIMES 

Except  for  a  project  that  collect- 
ed the  1996  presidential-elec- 
tion Web  sites,  the  Smithso- 
nian Institution  in  Washington  has 
done  little  to  collect  pieces  of  what 
is  undoubtedly  the  most  significant 
development  in  technology  of  the 
last  quarter-century:  the  Internet. 

That  task  has  fallen  to  the  Inter- 
net Archive,  a  nonprofit  San  Fran- 
cisco organization  that  has  been 
working  for  the  last  four  years  gath- 
ering snapshots  of  all  the  files,  pic- 
tures and  text  on  the  Internet. 

The  snapshots  are  taken  largely 
by  Alexa  Internet,  a  San  Francisco- 
based  subsidiary  of  Amazon.com 
that  makes  Web  search  and  naviga- 
tion tools.  Alexa  has  crawled  the 
Internet  a  total  of  seven  times  since 
the  company  was  created  in  1996. 

"This  is  going  to  be  an  ongoing 
record  of  what  things  were  like," 
said  Niall  O'Driscoll,  Alexa's  vice 
president  of  engineering.  Histori- 
ans will  be  able  to  track  such  impor- 
tant developments  as  the  start  of 
e-commerce  and  the  growth  of  com- 
panies such  as  Amazon.com  and 
eBay,  he  said. 

But  he  added  that,  no  matter  how 
complete  the  archive  becomes,  it 
can  never  go  back  and  save  what 
was  not  recorded  before  the  crawls 
began.  That  includes  the  birth  of 
the  search  engine  Yahoo,  the  rise  of 
Netscape,  and  the  outpouring  of  mil- 
lions of  messages  and  Web  pages 
from  people  debating  the  potential 
uses  of  the  new  medium. 

"Almost  zero  has  been  saved 
from  those  times,"  O'Driscoll  said. 
"It's  really  unfortunate  that  we 
don't  have  a  very  good  record  of 
those  times.  It's  probably  all  gone." 
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The  Web  news  sites  strugg  e 
with hunting  business ,£*to 

The  first  is  learning  to  survive 
by  depending  on  Internet  advertis- 
ing which  sounds  easy  at  first. 
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Media  sites  battle  for  ad  dollars 


Los  Angeles  Times 

Total  Web  ad  revenues  have 
risen  spectacularly,  from  virtually 
zero  in  1995  to  $4.6  billion  in  1999, 
and  $2  billion  in  the  first  quarter 
of  2000,  according  to  Pricewater- 
houseCoopers.  And  the  New  York 
merchant  bank  Veronis  Suhler 
projects  annual  Internet  advertis- 
ing revenues  to  reach  $24.4  billion 
by  2004  —  boosting  the  Web  above 
all  other  media  except  newspa- 
pers, TV  and  radio. 

But  competition  for  those 
Internet  ad  dollars  is  intense. 
Today  there  are  more  than  1.4  bil- 
lion Web  pages  of  all  sorts,  accord- 
ing to  the  Web  navigation  compa- 
ny A2exa_Jnternet_ 

Media  sites  fight  for  every  "eye- 
ball" against  major  Internet  serv- 


ice providers  and  portals  such  as 
AOL  and  Yahoo  —  which  main- 
tain hugely  popular  news  sections 
—  as  well  as  thousands  of  special- 
ized sites  with  their  own  news 
links,  plus  government,  universi- 
ty and  library  sites. 

Ad  buyers  seem  to  have  thrown 
up  their  hands  at  this  information 
overload.  Just  8  percent  of  Web  ad 
dollars  go  to  news  and  informa- 
tion sites,  only  a  handful  of  which 
are  in  the  top  50  that  receive  95 
percent  of  all  ad  revenues. 

Under  such  circumstances,  "the 
prospects  of  the  broadcast  (TV) 
business  as  we  know  it  are  proba- 
bly going  to  be  superior  to  any 
Web-based  content  venture  forev- 
er," said  Peter  Appert,  a  media 
analyst .  ^s 
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Media  sites 
fighting  for 
'eyeballs,'  ads 

LOS  ANGELES  TIMES 

The  Web  news  sites  struggle  with 
daunting  business  problems. 

The  first  is  learning  to  survive  by 
depending  on  Internet  advertising, 
which  sounds  easy  at  first. 

Total  Web  ad  revenues  have  risen 
spectacularly,  from  virtually  zero  in 
1995  to  $4.6  billion  in  1999,  and  $2 
billion  in  the  first  quarter  of  2000, 
according  to JPricewaterhQUseCoop- 
ers.  And  the  New  York  merchant 
bank  Veronis  Suhler  projects  annual 
Internet  advertising  revenues  to 
reach  $24.4  billion  by  2004  —  boost- 
ing the  Web  above  all  other  media 
except  newspapers,  TV  and  radio. 

But  competition  for  those  Inter- 
net ad  dollars  is  intense.  Today  there 
are  more  than  1.4  billion  Web  pages 
of  all  sorts,  according  to  the  Web 
navigation  company  Alexa  internet. 
Media  sites  fight  for  every  "eyeball" 
against  major  Internet  service 
providers  and  portals  such  as  AOL 
and  Yahoo!  —  which  maintain  hugely 
popular  news  sections  —  as  well  as 
thousands  of  specialized  sites  — 
from  Women.com  to  Christianpor- 
tal.com  —  with  their  own  news  links, 
plus  government,  university  and  li- 
brary sites. 

Ad  buyers  seem  to  have  thrown 
up  their  hands  at  this  information 
overload.  Just  8  percent  of  Web  ad 
dollars  go  to  news  and  information 
sites,  only  a  handful  of  which  are  in 
the  top  50  that  receive  95  percent  of 
all  ad  revenues,  researchers  say. 

Then  there  are  the  other  media 
competitors  —  some  20,000  maga- 
zines, 10,000  newspapers,  hundreds 
of  TV  programs. 

Under  such  circumstances,  "the 
prospects  of  the  broadcast  (TV)  business 
as  we  know  it  are  probably  going  to  be 
superior  to  any  Web-based  content  ven- 
ture forever,"  said  Peter  Appert,  a  media 
analyst  with  the  investment  bank 
Deutsche  Banc  Alex,  Brown.  // 
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Imaging  News 


Instant  Digital  Pictures 

Olympus  and  Polaroid  team  up  to  produce  the  -  C-2 1 1 
ZOOM  which  combines  digital  image  capture  with 
instant  print  technology.  Yep,  it  has  a  built-in  printer, 
but  no  its  not  a  minature  inkjet.  Merging  old  and  new,  it 
uses  Polaroid's  advanced  instant  film.  Makes  you 
wonder  how  did  that  film  work  in  the  old  Polaroids 
anway?  You  can  go  digital  using  a  smart  card  to  insert 
in  your  computer  or  you  can  print  out  a  photographic 
quality  print  from  your  camera.  It  will  be  available  in 
the  fall  for  only  $800  from  Olympus. 

2  Megapixel  Point  &  Shoot  Digital  Zoom  Camera  for  Under  $500. 

Olympus  also  announces  the  D-490  ZOOM.  Housed  in 
a  stylish  champagne  gold  metallic  compact  point  & 
shoot  body,  the  Olympus  D-490  ZOOM  offers  a  2.1 1 
megapixel  resolution  CCD  and  3X  optical  zoom  lens 
with  QuickTime  movie  ability,  all  for  less  than  $500. 

More  Help  for  PowerPoint  Shows. 

Getty  Images  joins  Corbis  in  recognizing  the 
PowerPoint  market.  Now  both  will  offer  small 
businesses  images  and  templates  using  images  ready  to 
show.  Getty  Images,  through  its  Gettyworks  Internet 
portal,  and  Corbis,  through  a  new  BizPresenter  brand, 
will  offer  millions  of  photographs  and  illustrations,  as 
well  as  presentation  templates  into  which  those  images 
can  be  plopped.  Both  sites  also  offer  useful  primers  on 
using  graphics,  look  to  their  sites  this  fall. 

Digital  Wallet 

From  our  friends  at  Imaging-resource.com  -See  Dave  Etchells  reviewStorage  for 
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If  you  don't  find  the 
answer  to  your 
questions  here, 
contact  us  and  we 
will  be  glad  to  assist 
you  personally. 


The  Digital  Wallet  is  intended  as  a  general-purpose 
portable  repository  for  all  sorts  of  digital  files,  including 
MP3  music  files  as  well  as  JPEG  or  TIFF  digital 
photos.  Dave  says  2we  think  will  be  a  real  boon  to 

traveling  digital  photographers  when  it's  released At 

an  Initial  list  price  of  $499  it  isn't  cheap,  but  when 
compared  to  the  cost  of  multiple  memory  cards,  it's  a 
bargain.2 
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Internet  Portals  want  Content! 

Would  your  content  be  safe  if  you  were  to  allow  others 
to  publish  it.  Now  a  portal  delivery  system  -  BackWeb 
Technologies  and  a  Digital  Rights  Management 
software  developer  -  InterTrust  -  have  teamed  up  to  do 
just  that.  BackWeb !s  push  technology  allows  Portal 
sites  or  even  your  own  intranet  to  deliver  large  file 
formats  such  as  music  and  streaming  video  without 
interfering  with  email  traffic.  IntreTrust's  MetaTrust 
Utility  DRM  platform  is  a  general-purpose  system  that 
can  be  used  to  manage  any  content  type  including 
music,  publications,  business  information,  video, 
games,  software  and  images.  You  establish  the  rules  of 
use  and  it  enforces  them.  So  make  sure  you  have 
established  the  Digital  Rights  to  your  work  .  Users 
make  sure  you  have  established  the  digital  rights  to 
other's  creative  effort,  because  It's  a  shell  game  out 
there. 


Copyright,  copyright,  who  has  the  copyright? 

Content  Creators  Claim  their  Rights 

The  National  Writers  Union  is  preparing  to  demand 
restitution  from  as  many  as  1 19  newspapers  with  online 
archives.  The  union's  president,  Jonathan  Tasini,  claims 
the  newspapers  infringed  on  the  rights  of  freelancers  by 
including  their  work  in  the  NewsLibrary  electronic 
database  without  their  permission. 

And  in  San  Francisco  a  new  suit  seeks  class-action 
status  on  behalf  of  all  writers  whose  works  are  in 
content  providers1  databases  for  sale  to  content  hungry 
web  sites.  This  suit  could  represent  potentially  as  many 
as  10,000  writers.  The  content  providers  maintain  that 
they  assume  the  original  publisher  from  whom  they 
purchase  the  article  has  cleared  the  copyright. 
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Another  Piece  of  information  to  add  to  your  MAM. 

One  university  Visual  Resource  maven  notes  that  they 
include  helpful  URLs  in  their  web  based  Image 
management  system.  In  her  case  it  is  to  such  sites  as  the 
Getty  Vocabularies  which  help  them  catalog  the  image, 
but  they  also  offer  some  sites  which  expand  their 
searches. 


Publishing  News 


More  News  on  Epson's  Archival  quality. 

Rick  LePage  ofCreativepro.com  gave  the  Epson  2000P 
high  marks  for  quality  of  printing.  He  feels  it  rivals 
traditional  Photographic  process.  The  final  independent 
testing  on  its  longevity  is  still  not  finished,  but  this  is 
looking  very  exciting.  Rick  calls  it  the  3Holy  Grail  of 
digital  imaging2 

Saving  The  Nation 's  Digital  Legacy 

The  nation's  creativity  extends  to  Web  sites,  electronic 
journals  and  magazines,  and  CD-ROM's  of  every  sort. 
And  the  [Library  of  Congress]  is  lagging  in  collecting 
and  archiving  that  digital  material,  according  to  a  report 
released  yesterday  by  the  National  Academy  of 
Sciences.  Unless  its  administrators  act  swiftly,  the 
report  says,  the  library  risks  diminishing  in  relevance. 
See  Katie  Hafner's  article  in  the  New  York  Times  for 
more  information. 

But  Others  are  There  -  ALEXA 

Alexa  began  collecting  the  Web  in  early  1 996  and  now 
has  at  least  three  snapshots  of  more  than466  million 
unique  web  pages.  Alexa  Internet  is  crawling, 
gathering,  and  storing  the  contents  of  the  publicly 
available  portion  of  the  World  Wide  Web  to  provide  a 
free  service  to  Internet  users.  Alexa  donates  the  info 
collected  in  the  crawls  to  Internet  Archive  (a  non-profit 
organization  )  which  keeps  all  the  information  from  all 
the  crawls  that  Alexa  has  done.  You  can  download  their 
toolbar  at  their  site  and  help  them  expand  their  related 
links.  They  will  record  your  searches  anonymously  - 
where  you  go,  not  who  you  are.  In  exchange,  you  have 
access  to  their  archive  for  those  pages  no  longer  in 
existences,  suggested  links  based  on  others'  path 
through  the  web  and  a  handy  dictionary.  A  worthwhile 
group  to  support  to  contribute  to  the  preservation  of  our 
digital  heritage  that  otherwise  might  be  lost  forever. 
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Introducing  Macromedia  University! 


A  new  and  easy  way  to  learn  about  Web  design  and 
publishing.  You  can  now  order  convenient,  effective, 
and  affordable  online  training  courses  from  the 
Macromedia  Online  Store. 


Goomoo  .com. 

Who  wouldn't  report  on  a  company  named  Goomoo. 
They  have  newly  released  a  product  called  Place  It 
Feature  (PIF)  for  the  promotional  industry.  PIF  allows 
manufacturers  of  promotional  items  such  as  watches  to 
enable  their  sites  so  that  buyers  and  distributors  can 
view  how  their  logo  looks  on  a  particular  item.  They 
can  also  enhance  and  manipulate  the  logo's  placement 
for  high  quality  end  product  preview.  They  simply  'drag 
and  place'  their  logo  onto  an  item.  They  can  instantly 
use  any  converted  logos  from  their  hard-drive  to  work 
with  the  application  on  the  Internet.  They  then  submit 
the  order  with  the  finalized  logo  placement.  Give  you 
any  ideas? 

Conferences 

Metamorphoses  2000:  Expressive  Technology  Art  and  Humanities 
Fourteenth  Annual  National  Conference  on  Liberal  Arts  and  the 
Education  of  Artists 
October  18-20,  2000: 
School  of  Visual  Arts,  NYC 

ASIS  Annual  Meeting,  Nov  11-16,  Chicago,  IL 

"Knowledge  Innovations:  Celebrating  Our  Heritage,  Designing  Our 

Future," 

See  sit  for  more  Information 

Office  of  Records  Services  -  Washington  DC  (NW) 
"Digital  Strategies  -  2000"  November  16-17, 
2000  National  Archives  at  College  Park,  Maryland 
For  registration  information  please  contact 
the  conference  planning  committee 
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Amazon  bares  its  privacy  policy 

By  Erich  Luening 

Staff  Writer,  CNET  News.com 

August  31,  2000,  7:10  a.m.  PT 


ADVERTISEMENT 


Over  the  next  couple  of  days,  giant  online  retailer  Amazon.com  will  be 
informing  its  millions  of  customers  by  email  about  its  new,  revamped 
privacy  policy,  a  company  spokesman  said  today. 

The  move  comes  amid  concerns  by  consumers  and  privacy  advocates  that 
online  companies  are  not  doing  enough  to  protect  the  privacy  of  Web  users, 
as  the  Seattle-based  company  prepares  to  face  several  class-action  lawsuits 
filed  on  grounds  of  electronic  privacy  invasion. 
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Amazon's  privacy  trial  is  scheduled  to  begin  Oct. 
26,  2001,  in  the  U.S.  District  Court  in  Seattle. 

The  policy  change  comes  also  as  the  Federal 
Trade  Commission  looks  into  the  company's 
software  unit  that  collects  information  about  how 
people  use  the  Internet. 

Amazon  said  it  is  making  the  move  to  build  trust 
among  its  customers  and  to  explain  what  exactly 
it  does  to  protect  the  information  customers 
provide. 


symbol  Lookup  "Customers  are  concerned  about  privacy,"  said 

Quotes  delayed  20+  minutes  Bill  Curry,  a  spokesman  for  Amazon.  "We  wanted 

to  clarify  what  we're  doing  and  not  doing  to  protect  their  privacy." 

The  new  policy  notice  on  the  company's  Web  site  explains  what  information 
the  company  gathers,  why  it  gathers  that  information,  and  by  what  means  it 
gathers  that  information-by  email,  for  instance,  or  through  the  use  of 
"cookies." 
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Cookies  are  small  files  that  online  companies  transfer  to  a  customer's 
computer  hard  drive  through  the  Web  browser  he  or  she  uses.  These  files 
enable  the  company's  systems  to  recognize  the  browser  and  some  of  a  given 
customer's  online  activities. 

The  posting  also  explains  how  the  company  protects  data  that  consumers 
send  its  way.  Among  other  things,  it  encrypts  information  during  transmission 
using  Secure  Sockets  Layer  (SSL)  software  and  reveals  only  the  last  five 
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digits  of  a  consumer's  credit  card  number  when  confirming  an  order. 

The  company  also  reminds  customers  of  steps  they  can  take  to  protect 
against  unauthorized  access  to  their  password  and  computer,  such  as 
signing  off  when  finished  using  a  shared  computer. 

In  its  legal  battle,  Amazon  stands  accused  of  invasion  of  privacy  under 
Washington  state  law  and  of  violation  of  the  Computer  Fraud  and  Abuse  Act 
and  the  Electronic  Communications  Privacy  Act,  both  federal  laws. 

The  accusations  stem  from  the  company's  implementation  of  technology 
acquired  along  with  Alexa  Internet  one  year  ago.  Alexa  makes  software  that 
monitors  Web  traffic  patterns.  Amazon  has  transformed  that  technology  into 
a  shopping  comparison  tool  dubbed  zBubbles. 

Claims  that  Alexa  was  collecting  personal  information  about  individuals, 
including  names  and  physical  addresses,  sparked  a  complaint  filed  to  the 
FTC.  Those  claims  are  at  the  root  of  the  lawsuits. 
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Amazon.com  revises  privacy  policy 

SEATTLE  (Bloomberg)  —  Amazon.com,  the  biggest  Internet  retailer, 
said  it  revised  its  privacy  policy  and  will  be  informing  its  23  million 
customers  of  the  changes  via  e-mail. 

The  move  comes  amid  concern  by  government  regulators  and 
consumer  groups  about  protecting  the  privacy  of  Internet  users. 

Amazon.com  also  faces  several  class-action  lawsuits  that  allege  its 
Alexa  software  unit  secretly  intercepted  personal  data  and  transmitted 
the  information  to  Amazon.com  and  other  parties.  The  Federal  Trade 
Commission  is  formally  investigating  Alexa. 

The  Seattle-based  company  said  the  policy  change  was  made  to  build 
trust  with  its  customers  and  provide  them  with  a  clear  picture  of  what 
the  company  is  and  isn't  doing  with  their  information.  The  lawsuits 
weren't  a  factor,  a  spokesman  said. 

"None  of  those  class-action  lawsuits  has  anything  in  the  world  to  do 
with  shopping  at  Amazon.com,"  spokesman  Bill  Curry  said.  "They  all 
relate  to  Alexa  and  the  only  reason  we're  named  is  because  we  own 
Alexa." 

The  new  privacy  policy  on  the  company's  Web  site  details  what 
personal  information  Amazon.com  gathers,  why  it  collects  it  and  how 
it  is  used.  The  company  didn't  say  how  the  new  policies  specifically 
differ  from  the  old  ones. 

Amazon.com  and  other  online  companies  have  been  working  to  find 
the  best  way  to  protect  consumers'  information  and  to  educate 
customers  on  their  policies,  without  government  intervention. 

"Consumers  are  demanding  more  protection  for  online  transactions," 
said  Mark  Rotenberg,  executive  director  of  the  Electronic  Privacy 
Information  Center,  a  Washington-based  advocacy  group. 

Internet  advertising  company  DoubleClick  Inc.  came  under  fire  earlier 
this  year  for  collecting  personal  information  about  Internet  users 
without  their  knowledge.  The  company  and  seven  other  Internet 
advertising  companies  reached  an  agreement  with  the  U.S.  Federal 
Trade  Commission  last  month,  in  an  attempt  to  resolve  criticism  of 
their  practices. 
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Net  On  It 


Sure,  you  use  the  Net.  But  do  you  know  how  to  make  it  work  for  you? 


The  Internet  makes  our  lives 
easier,  right?  At  any  given 
moment,  you're  just  a  point  and 
click  away  from  news,  information  and 
resources  sure  to  help  you  run  your 
company  better  and  smarter.  You  can 
access  today's  news,  financial  data, 
travel  information,  potential  custom- 
ers, suppliers  and  a  whole  lot  more. 
Trouble  is,  you  and  your  employees 
can  also  get  bogged  down  with  too 
much  information,  too  many  choices 
and  simply  too  many  distractions. 

There  are  a  lot  of  software  tools  out 
there  designed  to  make  the  Web  a  lot 
more  productive,  not  to  mention  con- 
siderably more  focused.  What's  truly 
amazing  is  that  many  of  these  tools  are 
free — so  grab  them  while  you  can. 


BEST  BETS 

^^  Find  it  fast:  Are  you  ever  work- 
^r  ing  on  a  document,  visiting  an 
Internet  page  or  reading  an  e-mail 
when  you  have  a  question  about  what 
you're  reading?  Normally,  you'd  head 
to  the  Web  to  search  for  a  definition 
or  additional  information.  Unfortu- 
nately, that  search  often  leads  you 
through  a  tangled  Web  to  the  ultimate 
answer.  GuruNet  (www.gurunet.com) 
is  a  software  application  that  does  away 
with  all  that  unnecessary  searching 
and,  instead,  puts  the  answers  right  at 
your  fingertips  (or  your  mouse  click). 
Simply  click  on  a  word  with  your  Alt 
key  depressed;  then  GuruNet  will 
go  out  to  the  Web  for  you,  locate  the 
information  and  deliver  it  back  in  an 
incredibly  easy-to-read  format.  Fur- 
thermore, it  will  even  give  you  click- 
through  options  to  additional  infor- 
a  mation. 

i  Say,  for  example,  you're  reading 
I  an  e-mail,  and  the  sender  mentions  a 
S  company,  a  person  or  even  a  word  that 
1  you  don't  recognize.  Just  click  on  it 
S  and  obtain  the  answer — fast  and 
;  without  ever  having  to  leave  the  appli- 
i  cation.  What  a  way  to  work!  You  can 


also  search  the  dictionary  and  Web 
sites,  find  books  on  a  topic  and  more. 
GuruNet  will  also  send  your  browser 
immediately  to  the  appropriate  Web 
site  for  more  information.  Even  bet- 
ter: GuruNet  is  free,  and  it  downloads 
quickly. 

^^  Double  your  viewing  plea- 
^W  sure:  Given  the  plethora  of  in- 
formation and  resources  on  the  Web, 
there  are  times  when  one  browser  win- 
dow just  won't  do.  Sure,  you  can  open 
another  one  and  toggle  between  them, 
but  that  can  be  such  a  cumbersome 
way  to  work.  Stilesoft's  NetCaptor 
(www.netcaptor.com)  offers  a  better  al- 
ternative: It  adds  simple  tabs  to  your 
browser  so  you  can  click  between  one 
page  and  the  next.  That  way,  you  can 
open  all  your  favorite  Web  sites  at 
once.  NetCaptor's  CaptorGroup  also 
lets  you  group  related  sites  in  one 
folder  so  you  can  view  all  the  sites  on  a 
topic  at  the  same  time.  A  free  version 
of  NetCaptor  includes  advertising,  but 
the  ad-free  version  costs  $19.95. 


A  Good  save:  How  many  times 
^r  have  you  wracked  your  brain  try- 
ing to  find  information  from  a  Web 
site  you  surfed  just  last  week?  No  mat- 
ter how  many  different  sites  you  try, 
the  data  you  need  is  ultimately  elu- 
sive. Perhaps  the  site  you're  attempt- 
ing to  find  has  already  disappeared 
from  the  Web,  or  you  simply  can't 
remember  where  the  data  appeared. 
SurfSaver  (www.surfsaver.com)  from 
askSam  Systems  changes  all  that:  It  lets 
you  save  Web  pages  directly  onto  your 
hard  drive  in  folders  that  can  be 
searched  even  when  you're  not  con- 
nected to  the  Internet.  You  can  save  a 
single  page,  multiple  pages  or  even 
an  entire  Web  site,  including  graph- 
ics and  links.  This  takes  bookmarking 
to  a  whole  new  level,  because  the  ac- 
tual Web  pages  are  downloaded  to  your 
hard  drive,  not  simply  links  to  pages 
(which  we  all  know  can  disappear  at 
any  moment).  SurfSaver  works  with 
both  Netscape  and  Explorer  and  can 
be  had  for  free  if  you're  willing  to 
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Phone.com 

www.phone.com 

Wireless  services  and  software  for  cell 

phone  Web  browsing 

Socket  Communications 

www.socketcom.com 
Digital  Phone  Card  ($100-$120)  links 
cell  phones  and  any  CompactFlash- 
equipped  Pocket  PCs  by  cable. 

Handango 

www.handango.com/home.shtml 
Online  store  for  handheld  solutions 
and  more  than  8,500  titles  from  3,400 
developers,  including  Palm,  Symbian 
Platform  and  Windows  Powered 

iGo 

www.igo.com 

Provider  of  accessories  and  services  for 
mobile  electronic  devices.  Database 
has  more  than  6,500  products  from 
more  than  350  suppliers. 


1 5 ,000  in  just  the  past  couple  of  months. 

So  far,  Microsoft  boasts  about  60 
partners  for  its  new  Windows  CE/ 
Pocket  PC  platform  and  has  pretty  much 
the  same  game  plan  as  Palm  for  wireless 
handheld  expansion.  It  will  support  the 
whole  gamut  of  solutions — built-in 
transceivers,  clip-on  modems,  cell 
phone-to-PDA  cables,  add-in  cards — 
and  let  customers  do  the  choosing,  says 
Rebecca  Thompson,  product  manager 
for  Microsoft  Mobile  Devices. 

Already,  infrared-equipped  handhelds 
and  cell  phones  can  create  a  dial-up  con- 
nection between  the  phone  and  PDA  if 
they  are  carefully  lined  up.  But  soon  the 
Bluetooth  protocol  will  make  wireless 
transfers  between  local  devices  bullet- 
proof. This  transceiver  chipset,  due  to 
become  standard  issue  in  desktops  as 
well  as  handhelds  starting  this  winter, 
works  at  up  to  30  feet. 

Ericsson  already  offers  Bluetooth- 
equipped  phones,  and  other  cell  phone- 
makers  can  simply  add  it  to  their  batter- 
ies. Size  and  cost  make  Blufetooth  a 
tougher  fit  for  handhelds,  says  Mace,  so 
Palm  will  rely  on  those  third-parties  in 
the  near-term.  Some  time  early  next 
year,  Palm  will  introduce  new  models 
including  a  slot  for  the  new  postage- 
stamp-sized  secure  digital  cards,  which 
will  eventually  store  as  much  as  256MB 


of  data  or  provide  Bluetooth  or  other 
I/O  functionality.  This  fall,  it  will  ship 
the  $50  (street)  Palm  Mobile  Internet 
Kit  to  connect  Palm  III  and  Palm  V 
models  to  mobile  phones  via  an  infrared 
link  or  a  separately  sold  cable.  Similarly, 
Microsoft  will  rely  on  Socket  Commu- 
nications, which  plans  a  winter  release 
of  a  $99  (street)  CompactFlash  card  as  a 
wireless  replacement  for  its  Digital 
Phone  Card  that  now  links  Pocket  PCs 
and  phones  by  cable. 

YOU  TALK  IN' TO  ME? 

By  first  quarter  2001,  Bluetooth 
cards  should  join  hundreds  of  other 
add-ons  already  being  sold  through 
online  catalogs  such  as  iGo  and  Hand- 
ango— and  even  Amazon.com.  Not 
too  far  behind  are  voice  command/ 
synthesis  products  which  will  initially 
be  sold  by  third  parties  like  Delphi  to 
customers  willing  to  pay  extra. 

For  example,  with  the  Communiport 
and  the  right  wireless  service,  you  can 
use  your  driving  time  to  dictate  a  quick 


thank-you  note  to  your  last  client, 
schedule  a  meeting  with  the  next  or 
download  driving  directions.  When 
traffic  really  shuts  down,  there's  the 
latest  news  headlines  or  a  quick  call 
to  your  online  broker. 

Once  Bluetooth  arrives,  some  hand- 
helds will  get  voice  capabilities  just 
by  borrowing  them  from  cell  phones 
like  the  NeoPoint  NP1000.  Why  re- 
invent the  wheel?  Already,  Phone.com 
is  trying  to  blend  Conversa's  voice 
technology  with  its  UPBrowser  for 
voice  navigation  of  the  Web. 

It's  all  so  new  and  volatile  that  it's 
hard  to  see  very  far  down  the  road. 
But  those  headlights  up  ahead  on  the 
horizon?  That's  really  mobile  com- 
puting coming  on  fast. 

For  more  information  on  the  wire- 
less trend,  turn  to  our  feature  "Notwired" 
on  page  98.  D 

Mike  Hogan,  Entrepreneur  s 
technology  editor,  can  be  contacted  at 
mikehoganentrepreneur@juno.com. 


Present  it  on  new  HammerMilP 
Proposals  &  Presentations 
paper  and  hammer  it  home. 

Why  trust  your  hard  work  to  ordinary  paper?  HammerMill  put  over  1 00 
years  of  paper  making  know-how  into  a  new  line  of  paper  that  makes  your  work 
look  better  That's  because  HammerMill  created  each  paper  for  the  specific  kinds 
of  work  you  do.    So  now  it's 
simple  to  choose  just  the  right 
paper  for  every  job. 

Like  new  HammerMill 
Proposals  &   Presentations 
papers  that  make  your  work 
look  more  professional  and 
help  you  nail  down 
the  assignment. 


Hammer  it  home 
on  HammerMill. 


wwwhammermill.com 
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view  ad  banners.  If  not,  a  $29.95  ver- 
sion is  available  online.  A  CD  version 
($39.95  street)  is  also  available  for 
those  who  want  to  avoid  lengthy  down- 
load times. 

jA.  Added  intelligence:  Some  of- 
^r  fers  on  the  Web  seem  too  good 
to  be  true,  and  sometimes  you  just  want 
to  be  sure  that  the  site  you're  buying 
your  next  pair  of  shoes  from  has  a  good 
reputation.  The  Alexa  (www.alexa.com) 
toolbar  follows  you  around  while  you 
surf,  giving  you  access  to  information 
you  wouldn't  otherwise  be  able  to  find 
so  easily.  For  example,  on  a  shopping 
site,  you  can  check  out  consumer  rat- 
ings with  a  click  of  a  button.  Better  yet, 
visit  your  competitors'  sites  and  obtain 
details  on  them.  The  bar  also  offers 
links  to  other  sites  in  a  similar  category, 
giving  you  one-click  search  capabili- 
ties. Another  bonus  is  that  Alexa  main- 
tains archives 
of  more  than 
5.1  million 
sites.  So,  if  the 
site  you  de- 
sire has  disap- 
peared, Alexa 
may  be  able 
to  find  it.  The 
software  is 
free  and  easy 
to  download. 

♦  Supersonic  browsing:  Tired  of 
waiting  for  Web  pages  to  load?  Is 
your  modem  connection  speed  bring- 
ing you  down?  Check  out  NetSonic 
(www.netsonic.com),  a  program  de- 
signed  to  improve  your  Web  experi- 
ence by  creating  a  special  cache  to  hold 
all  the  Web  pages,  text  and  graphics. 
Dubbed  one  of  the  best  Internet  ac- 


WISE  BUYS 


WEB  SITE:  |  www.appcity.com  "| 


Pretty  soon,  employees  of  big  corpor-     F\ 
ations  will  be  using  little  computers— and 
you'll  still  be  struggling  with  huge,  powerful 
and  expensive  hardware.  What's  the  differ- 
ence? More  big  companies  are  switching  to 
a  thin  client-server  model,  where  relatively 
cheap  computers  can  access  software  and 
information  that  reside  on  servers,  not  on 
hard  drives.  AppCity  aims  to  help  you 
streamline  your  hardware,  too:  The 
company  offers  dozens  of  business-quality, 
Web-hosted  applications— for  free.  Check  it 
out.  One  bother,  though:  You  have  to 
download  and  install  an  8MB  AppPlayer  first. 
—Robert  McGarvey 


OTiny  protector:  These  days,  viruses  run  amok — especially  now  that  many  of 
our  machines  are  hooked  to  the  Net  day-in  and  day-out  via  DSL  and  cable 
modems.  Your  computer  can  be  easily  hacked  into  if  you  leave  it  on  and  open  to 
outside  sources.  Hackers  can  even  take  control  of  your  system,  using  it  to  propagate 
viruses  or  access  your  company's  network.  What  you  need  is  a  firewall  to  protect  you 
from  the  outside  evils.  TINY  Software's  Tiny  Personal  Firewall  (www.tinysoftware.com) 
is,  well,  a  tiny  program  at  just  222K.  With  it,  you  can  monitor  who's  trying  to  enter  your 
system.  This  program  runs  on  any  Windows  system,  including  95,  98,  2000  and  NT, 
and  is  easy  to  use  and  set  up.  And  at  just  $29  (street),  Tiny  Personal  Firewall  makes 
security  a  reality  for  everyone.  iiiB^ 

wj^\  Time  is  money:  If  you're  in  the  service  industry, 
■r    reservations  and  appointments  are  the  mainstay  of 
your  business.  Wouldn't  it  be  great  if  your  customers 
could  make  appointments  on  your  Web  site  2H  hours  a 
day?  Xtime  (www.xtime.com)  thinks  so;  in  fact,  it's  one  of 
the  first  companies  to  address  the  needs  of  businesses 
that  require  online  scheduling.  The  solutions  are  already 
used  in  hospitals  and  more.  Xtime  was  still  in  beta  when 
we  checked  it  out  and  pricing  was  not  available. 


celerators  available,  NetSonic  is  free  for 
the  downloading.  However,  you'll  have 
to  view  advertising  if  you  want  the  free 
version;  the  ad-free  version,  NetSonic 
Pro,  costs  $39.95.  This  program  learns 
as  you  go,  downloading  pages  faster  and 
faster  each  time  you  visit  a  Web  site.  It 
also  pre-loads  the  links  on  a  Web  page, 
creating  a  seamless  surfing  experience. 
The  program  works  within  almost  any 
browser,  including  Netscape,  Explorer, 
AOL  and  CompuServe. 
Jfe^  Know  where  and  when:  Ev- 
^r     eryone  wants  a  personal  assistant, 
someone  to  tell  you  where  and  when 
you've  got  to  be  somewhere  or  do 
something.  When.com  can  help.  It  lets 
you  schedule  your  own  appointments 
online  and  helps  you  keep  track  of  cur- 
rent events  (theater,  movies,  trade  shows 
and  more).  And  it  doesn't  cost  any- 
thing, so  check  it  out. 
^^   Getting  personal:  Want  to  de- 
^r     sign  the  Web  to  work  for  you? 
That's  what  Infospace. corn's  Personal 
Desktop  Portal  (www.infospace.com) 
is  all  about.  You  can  create  your  own 
environment  on  the  Web,  with  the 
news,  stock  quotes,  weather  infor- 
mation and  sports  scores  you  want. 
You  can  keep  your  address  book  and 
calendar  online  and  access  them  any- 
where you  go.  It's  free,  too,  thanks  to 
the  ad-supported  program. 
jftt     Spam  be  gone:  Wading 
^r     through  dozens — or  even  hun- 
dreds— of  worthless  e-mails  can  put 


K  %  Positive  charge:  If  you  or  your 
■r    accountant  is  having  a  difficult 
time  mastering  the  fine  art  of 
QuickBooks,  Peachtree  or  MAS90, 
TakeCharge!  ($2H9  street),  a  program 
from  Marlatt  Crash  Coursewear,  may  be 
just  what  you're  looking  for.  Designed  to 
enable  bookkeepers  to  take  full 
advantage  of  the  features  offered  by 
those  fairly  robust  programs, 
TakeCharge!  promises  an  engaging 
multimedia  interactive  format  with 
practical  examples,  checklists  and 
challenging  quizzes.  You'll  also  find  a 
complete  glossary  of  accounting  and 
business  terms  and,  hopefully,  gain  a 
new  perspective  on  bookkeeping 
issues.  For  more,  visit  www. 
crashcourseware.com  or  call 
(877)  272-7H29. 


the  best  of  us  in  bad  moods.  So,  why 
waste  precious  time  deleting  spam  when 
someone  else  can  take  care  of  it  for 
you?  Brightmail  (www.brightmail.com) 
lets  business  owners  tap  into  its  spam- 
fighting  technology — free  of  charge. 
Brightmail  essentially  sidelines  your 
suspected  spam  and  allows  you  to  view 
it  whenever  you  desire.  And  the  only 
thing  you  have  to  do  is  visit  your 
account  on  their  Web  site.  12 

Cassandra  Cavanah  (ccavanah@earthlink. 
net)  is  a  Los  Angeles  freelance  writer  who 
has  reported  on  the  computer  industry  for 
nine  years. 
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Your  #1  lead  source  for  business  information. 


Entrepreneur  magazine— Manage  and  keep  your  business  growing 
with  Entrepreneur.  You'll  get  information  on  the  latest  internet  business, 
the  hottest  franchises,  marketing  secrets  and  valuable  tips  on  the  art 
of  negotiation.  Subscribe  now  and  obtain  the  secrets  that  has  made 
Entrepreneur  the  Small  Business  Authority. 

Entrepreneur's  Start-Ups  magazine-Get  all  the  information 
you  need  to  start  your  business  with  Entrepreneur's  Start-Ups.  It 
is  the  one  source  to  turn  to  for  everything  you  need:  Hot  businesses 
to  start,  E-commerce  ideas  and  answers,  financing,  raising  capital  and 
real-life  inspirational  stories.  Subscribe  to  Entrepreneur's  Start-Ups 
and  turn  your  ideas  into  financial  success. 

Get  the  results  you're  looking  for. 
Call  800-274-6229  to  subscribe. 
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Tech  Briefs 

September  1,  2000 

New  account 

FiNetrics  Inc.,  the  Chicago  application  service  provider,  and  Arthur 
Andersen,  the  Chicago-based  international  accounting  firm,  have  formed  a 
partnership  to  offer  software  and  services  for  small  businesses.  The  software 
will  be  available  online.  In  addition,  Andersen  staff  professionals  will  provide 
on-site  financial,  tax  and  business  advice.  FiNetrics  is  a  member  of  the  divine 
interVentures  group  of  companies. 

To  the  hounds 

SalesHound.com,  the  Chicago  provider  of  online  information  regarding 
advertised  sales  in  offline  stores,  is  now  offering  coupons  online  in  a 
partnership  with  Valpak.com.  Visitors  to  SalesHound.com  will  have  access  to 
more  than  30,000  Valpak  coupons  that  can  be  redeemed  in  brick-and-mortar 
stores. 


The  bid  is  in 


PROBLEMS? 


Bid4real,  the  Chicago  online  real  estate  auction  marketplace,  has  launched  a 
new  Web  site  with  new  features  for  residential,  commercial  and  industrial 
properties.  The  site  now  allows  sellers  to  upload  property  documents  and  has 
a  tool  to  authenticate  buyers  and  sellers.  Bid4real  is  a  member  of  the  divine 
interVentures  group  of  companies. 


Aprimo  deal 

First  Analysis  Venture  Capital,  the  Chicago  venture  company,  led  a  $20 
million  round  to  finance  Aprimo  Inc.,  an  Indianapolis  provider  of  proprietary 
e-marketing  management  tools. 

Innovative  approach 

Brinks  Hofer  Gilson  &  Lione,  the  Chicago  intellectual  property  law  firm,  and 
the  University  of  Chicago  are  sponsoring  a  symposium  on  innovation  and  e- 
commerce  from  8  a.m.  until  1 :30  p.m.  next  Thursday  at  the  U.  of  C.'s 
Gleacher  Center.  Austan  Goolsbee,  associate  professor  of  economics  at  the 


http://www.suntimes.com/output/tech/eshorts01.html 
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university,  will  be  the  keynote  speaker. 

Private  matters 

Amazon.com  Inc.  revised  its  privacy  policy  and  will  inform  its  23  million 
customers  of  the  changes  via  e-mail.  Amazon.com  also  faces  several  class- 
action  lawsuits  that  allege  its  Alexa  software  unit  secretly  intercepted 
personal  data  and  transmitted  the  information  to  Amazon.com  and  other 
parties.  The  Seattle-based  company  said  the  policy  change  was  made  to  build 
trust  with  its  customers.  The  lawsuits  weren't  a  factor,  a  spokesman  said. 

Out  of  hand 

Makers  of  hand-held  computers  will  have  trouble  filling  orders  this  holiday 
season  because  of  a  shortage  of  parts,  executives  and  analysts  said.  "We're  in 
backlog  on  literally  every  single  product  in  the  line,"  said  Palm  Inc.  Chief 
Competitive  Officer  Michael  Mace.  Supplies  are  lagging  in  part  because  of  a 
scarcity  of  components  such  as  liquid  crystal  displays,  color  screens  and  flash 
memory  chips. 

Back  to  top  ■  Back  to  Technology 


Visit  Our  Partners  |  Daily  Southtown  vj  GE> 


,.-z&± 


:  ■»/, 


mm 


Masterpiece  aa  the  Mississippi 


[News]  [Sports]  [Business]  [Showcase]  fClassifiedsl  [Columnists!  [Feedback]  [Homel 

Copyright  2000,  Digital  Chicago  Inc. 


http://www.suntimes.com/output/tech/eshorts01.html 


9/5/00 


DUMllCbb.   DUMllCbb   lUUiiy 


rage  i  ui 


Htfletetaburq  Ernest  on  li  n  e  business 
Iom 


Click  your  way 


Calendars  Classifieds 


sptimes.com 

Text-only 

tampabay.com 

Area  guide 

Calendar 

Comics  &  Games 

Find  it1 

Forums 

Movies 

Residents 

Restaurants 

Travel 
reservations 

Visitors 
Weather 
Ybor  City 
Yellow  Pages 
News  sections 
Action 

Arts  & 
Entertainment 

APThe  Wire 

Business 

Citrus  County 

Columnists 

Flondian 

Hernando  County 

Letters 

Obituaries 

Opinion 

Pasco  County 

Sports 

State 

Tampa  Bay 

World  &  Nation 

Find  your  local 
news  section 
Weekly  sections 


Weather      I  Yellow  Pases 


CS 


-vail  this   story 


ML 


Print  this    o-tory 


Business  today 

By  Compiled  from  Times  wires 

©  St.  Petersburg  Times,  published  September  1 ,  2000 

AMAZON  UPDATES  PRIVACY  POLICY: 
Amazon.com  Inc.  said  it  revised  its  privacy  policy  and 
will  be  informing  its  23-million  customers  of  the 
changes  via  e-mail.  The  new  privacy  policy  details 
what  personal  information  Amazon.com  gathers,  why  it 
collects  it  and  how  it  is  used.  Amazon.com  faces 
several  class-action  lawsuits  that  allege  its  Alexa 
software  unit  secretly  intercepted  personal  data  and 
transmitted  the  information  to  Amazon.com  and  other 
parties.  A  spokesman  said  the  lawsuits  weren't  a  factor. 

ORLANDO  SENTINEL  EDITOR  TO  RETIRE:  John 
Haile,  who  as  editor  of  the  Orlando  Sentinel  launched  a 
24-hour  cable  news  station,  ushered  the  newspaper  into 
the  Internet  age  and  led  his  staff  to  three  Pulitzer  Prizes, 
has  announced  his  retirement.  Haile,  55,  said  he  will 
stop  working  for  the  Sentinel  by  Jan.  1 .  A  replacement 
wasn't  immediately  announced.  Haile  said  he  always 
had  planned  to  retire  after  he  turned  55  and  completed 
his  15th  year  in  the  Sentinel's  top  editorial  position. 
After  the  new  year,  Haile  will  focus  his  attention  on  an 
independent  media  company  he  created,  Inside  Out 
Media  Partners,  which  will  provide  consulting  services 
for  newspaper,  television  and  interactive  operations. 

TAMPA  WIRELESS  PROVIDER  TO  BE  BOUGHT: 
Intellicall  Inc.,  known  mostly  as  a  manufacturer  of  pay 
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telephones,  is  making  a  play  in  the  wireless  world  with 
its  deal  to  buy  Wireless  WebConnect  of  Tampa.  John 
McDonald,  chief  executive  of  Carrollton,  Texas-based 
Intellicall,  said  the  deal  is  worth  about  $12-million 
based  on  an  average  annualized  share  price  of  75  cents. 
Wireless  WebConnect  is  a  high-speed,  wireless  Internet 
provider.  It  will  maintain  a  call  center  in  Tampa. 

AIRLINE  STARTS  TAMPA-NEW  YORK  SERVICE: 

Spirit  Airlines  will  begin  non-stop  service  from  Tampa 
International  Airport  to  New  York's  LaGuardia 
International  Airport  on  Sept.  5.  The  low-fare  airline 
will  have  one  flight  daily  in  each  direction,  scheduled  to 
leave  Tampa  at  10:30  a.m.  and  return  at  4:45  p.m.  Spirit 
is  offering  introductory  fares  from  $68  each  way,  based 
on  a  round-trip  purchase.  The  fare  is  good  for  tickets 
booked  by  Sept.  1 1  for  travel  through  Oct.  17. 

DANKA  SHARES  HIT  RECORD  LOW:  Shares  of 
Danka  Business  Systems,  which  began  the  year  at 
$12.69,  fell  19  cents,  or  10  percent,  to  an  all-time  low 
of  $1.63  a  share.  The  St.  Petersburg  copier  supply 
company  lost  money  in  both  the  first  and  second 
quarters,  and  investors  are  worried  that  the 
management's  turnaround  efforts  may  have  stalled. 

NORDSTROM  EXECUTIVES  RESIGN:  Nordstrom 
Inc.  said  chairman  and  chief  executive  John  Whitacre 
and  chief  financial  officer  Michael  Stein  resigned  from 
the  upscale  retailer.  Two  Nordstrom  family  members, 
Blake  and  Bruce  Nordstrom,  will  take  the  helm.  Blake 
Nordstrom,  39,  was  named  president  and  will  select  a 
new  chief  financial  officer,  the  company  said.  Bruce 
Nordstrom,  66,  was  named  chairman.  The  shake-up 
comes  as  Nordstrom  struggles  to  revive  sales  and  better 
manage  its  inventory.  Nordstrom  shares  fell  $1.13  to 
$17.25;  the  announcement  came  after  the  close  of 
regular  U.S.  trading. 

VITALITY  TO  CLOSE  ZEPHYRHILLS  PLANT: 
Vitality  Beverages  Inc.  is  closing  a  Zephyrhills  facility 
that  manufactures  its  juice  dispensers,  the  result  of  a 
deal  to  have  IMI  Cornelius  of  London  take  over 
production.  Forty  people  will  lose  their  jobs.  Tampa- 
based  Vitality  also  announced  that  it  has  bought 
Peerless  Foods  Ltd.,  a  Canadian  beverage  distributor,  as 
part  of  its  drive  to  expand  its  North  American 
distribution  network. 
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LUCENT  TO  CREATE  NEW  COMPANY:  Lucent 
Technologies  Inc.  plans  to  create  a  new  company, 
spinning  off  three  businesses  to  its  shareholders  as  part 
of  a  special  dividend.  Avaya  will  be  created  from 
Lucent's  Enterprise  Networks  Group,  which  sells 
business  telephone  networks,  voice  and  data  switches 
for  those  networks,  voice  messaging  systems  such  as  its 
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popular  Intuity  AUDIX,  and  other  equipment  and 
services  to  government  agencies  and  large  and  small 
businesses.  The  spinoff  will  be  complete  Sept.  30,  the 
end  of  Lucent's  fiscal  year.  On  that  date,  Avaya  shares 
will  be  distributed  to  everyone  holding  Lucent  shares  as 
of  Sept.  20.  Lucent's  stock  fell  94  cents  to  $41.88. 

AUTO  PARTSMAKER  ISSUES  PROFIT  WARNING: 
Auto  partsmaker  Visteon  Corp.  says  its  third-quarter 
profits  will  fall  12  cents  to  14  cents  a  share  due  to 
production  cuts  at  Ford  Motor  Co.,  Visteon's  former 
parent.  That  would  translate  to  a  reduction  of $13- 
million  to  $16-million  based  on  Visteon's  outstanding 
shares  last  quarter.  Wall  Street  analysts  had  estimated 
Visteon's  earnings  at  49  cents  a  share,  or  roughly  $64- 
million.  Ford  is  cutting  production  of  25,000  Ranger 
pickups  and  Explorer/Mountaineer  sport  utility  vehicles 
to  divert  tires  for  use  as  replacements  in  the  recall  of 
6.5-million  Firestones.  Shares  of  Visteon  fell  50  cents, 
or  3  percent,  to  close  at  $15.69. 

MICROSOFT  UPDATES  ONLINE  PORTAL:  Making 
another  run  at  America  Online  Inc.,  Microsoft  Corp. 
will  offer  high-speed  Internet  access  in  the  fall,  coupled 
with  a  makeover  of  its  MSN  online  portal.  The  project, 
dubbed  "MSN  2001"  within  the  company,  is  aimed 
squarely  at  luring  Web  surfers  away  from  America 
Online. 
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amazon.com  shifts 
policy  on  privacy 

SEATTLE  ~  amazon.com,  the  biggest  Internet 
retailer,  said  it  revised  its  privacy  policy  and  will 
be  informing  its  23  million  customers  of  the 
changes  via  e-mail. 

The  move  comes  amid  concern  by  government 
regulators  and  consumer  groups  about  protecting 
the  privacy  of  Internet  users. 

amazon.com  also  faces  several  class  action 
lawsuits  that  allege  its  Alexa  software  unit  secretly 
intercepted  personal  data  and  transmitted  the 
information  to  amazon.com  and  other  parties.  The 
Federal  Trade  Commission  is  formally 
investigating  Alexa. 

The  Seattle-based  company  said  the  policy 
change  was  made  to  give  customers  a  clear  picture 
of  what  the  company  is  and  isn't  doing  with  their 
information.  The  lawsuits  weren't  a  factor,  a 
spokesman  said. 

Broadcom  sued 
over  patent  issues 

WILMINGTON,  Del.  -Intel  Corp.,  the  world's 
biggest  computer-chipmaker,  has  filed  a  lawsuit 
charging  Broadcom  Corp.  with  infringing  patents 
on  cable  and  high-  speed  networking  products. 

In  the  lawsuit,  Intel  accuses  Broadcom  of 
having  a  "carefully  crafted  plan"  to  build  its 
business  using  Intel  technology.  Intel  has  met  with 
mixed  success  in  a  separate  lawsuit  filed  in 
California  state  court  seeking  to  bar  Broadcom 
from  using  several  former  Intel  workers  to  develop 
products. 

The  patent-infringement  lawsuit  filed  last  week 
in  federal  court  in  Wilmington,  alleges  Broadcom 
has  tread  upon  Intel's  patented  technology  for  "a 
diverse  range  of  technologies,"  including  smart- 
networking  products,  motion  picture  decoding  used 
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in  Broadcom  cable  products  and  the  packages  that 
Broadcom  uses  to  sell  its  chips. 

Broadcom  officials  said  they  had  not  yet  seen 
the  lawsuit  and  therefore  had  no  immediate 
comment. 

J.C.  Penney,  Target 
give  profit  warnings 

PLANO,  Texas  ~  J.C.  Penney  Co.  and  Target 
Corp.  said  fiscal  third-quarter  earnings  may  be  hurt 
by  less-than-expected  August  sales  and  a  slow  start 
to  the  back-to-school  shopping  season. 

J.C.  Penney,  which  has  been  struggling  to 
compete  with  lower-priced  and  trendier  rivals,  said 
it  may  reduce  profit  estimates  for  the  quarter 
ending  in  October.  The  average  estimate  of  analysts 
polled  by  First  Call/Thomson  Financial  is  31  cents 
per  share,  less  than  the  51  cents  J.C.  Penney  earned 
a  year  earlier. 

Target  said  profit  may  decline,  though  it  didn't 
provide  details.  The  company  is  forecast  to  earn  28 
cents  per  share,  according  to  First  Call.  It  earned  a 
split-adjusted  26  cents  a  year  earlier. 

The  back-to-school  shopping  season  started 
slowly  start  as  consumers,  discouraged  by  a  lack  of 
new  fashions  during  the  summer,  waited  to  see 
September's  offerings.  J.C.  Penney  and  Target  cut 
prices  in  August  to  clear  out  summer  goods  and 
make  room  for  backpacks,  linens  and  fall  clothes. 
Price  markdowns  reduce  the  amount  of  profit  made 
on  each  sale. 

Apple  to  unveil  test 
operating  system 

CUPERTINO,  Calif.  ~  Apple  Computer,  maker 
of  the  candy-colored  iMac  personal  computers,  will 
introduce  a  publicly-available  test  version  of  its 
new  operating  system  software  on  Sept.  13,  Chief 
Executive  Steve  Jobs  said. 

The  company  will  introduce  the  test  version  in 
conjunction  with  the  Apple  Expo  trade  show  in 
Paris,  Jobs  said. 

Apple  has  spent  years  preparing  a  rewritten 
version  of  the  operating  system  that  runs  its 
computers.  Dubbed  OS  X  (10),  the  software 
program  includes  features  such  as  a  tool  bar  for 
organizing  frequently  used  documents  and 
programs,  a  software  player  for  listening  to  music 
MP3  files  and  an  updated  Quicktime  player  for 
viewing  video. 

The  final  version  of  the  operating  system  is 
expected  to  go  on  sale  in  early  2001,  Jobs  said,  at 
the  Seybold  publishing  trade  show  in  San 
Francisco. 

E-mail  this  story  to  a  friend: 
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The  6th  U.S.  Army  marched  out  the  Lombard  Street  gate  of  San 
Francisco's  Presidio  five  years  ago,  leaving  a  wondrous  urban 
oasis  with  an  uncertain  future. 

A  cost-cutting  Congress  was  considering  selling  off  the  storied 
military  post,  but  eventually  agreed  to  turn  the  base  with  its 
windswept  cypress  trees  and  graceful  historic  buildings  into  a 
national  park  ~  if  it  could  pay  its  own  way. 

Today,  just  two  years  after  the  non-profit  Presidio  Trust  took  on 
the  job  of  keeping  the  park  off  the  auction  block,  that  goal  seems 
easily  within  reach.  Thanks  to  the  arrival  of  moviemaker  George 
Lucas,  thriving  Internet  companies  and  renters  eager  to  pay  up  to 
$6,000  a  month  for  former  officers'  quarters,  the  Presidio  appears 
to  be  well  on  its  way  to  supporting  itself  -  something  no  other 
national  park  must  do. 

But  critics  fear  the  drive  to  pay  the  bills  is  turning  a  unique 
national  treasure  that  draws  4  million  visitors  a  year  into  the 
region's  most  exclusive  business  park. 

"1  don't  see  how  re-creating  a  Silicon  Valley  or  South-of-Market 
incubation  place  for  high-tech  start-ups  in  any  way  serves  the 
larger  vision  of  our  national  parks,"  said  Brian  Huse,  regional 
director  of  the  National  Parks  Conservation  Association  in 
Oakland. 

He  points  to  the  Lucas  Digital  Arts  project,  to  an  offshoot  of 
Amazon.com  called  Alexa  Internet,  and  to  a  new  lease  being 
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negotiated  with  technology  investment  bank  WR  Hambrecht  Co. 
as  examples  of  commercial  ventures  with  questionable  roles  in  a 
national  park. 

A  planning  process  launched  this  summer  is  designed  to  guide 
the  park's  future,  and  park  watchdogs  hope  the  public  workshops 
will  be  a  chance  to  question  the  trust  closely  about  its  mission. 
Will  the  Presidio  become  a  bustling  high-tech  center,  a  refuge  for 
charities  and  the  arts,  or  something  else? 

"What  really  is  required  is  for  the  trust,  with  the  public's  input, 
to  articulate  a  clear  vision  for  what  the  Presidio  is  going  to  look 
like,  feel  like,  be  like,"  Huse  said. 

Trust  officials  agree  that  it  is  time  to  set  the  Presidio's  course. 
Nearly  a  decade  has  passed  since  an  earlier  management  plan 
was  prepared  by  the  National  Park  Service,  and  the  landscape  has 
changed  dramatically  in  that  time. 

No  more  Army 

For  one,  the  Army  is  gone,  although  100  or  so  military  families 
remain.  Instead  of  congressional  appropriations  and  defense 
spending,  the  private  sector  will  increasingly  pay  for  the 
Presidio. 

The  old  plan  also  anticipated  that  the  University  of  California- 
San  Francisco  would  establish  a  research  facility  at  the  Letterman 
hospital.  But  that  deal  fell  through,  and  Lucas'  digital  movie 
campus  is  planned  instead.  The  Internet  revolution  has 
overshadowed  the  idea  of  a  center  for  the  environment  and  world 
peace. 

Trust  officials  say  the  chief  mission  is  still  to  protect  and 
showcase  the  Presidio's  dramatic  natural  environment  and 
historic  sites.  After  all,  the  1,480-acre  park  is  part  of  the  Golden 
Gate  National  Recreation  Area  and  under  the  care  of  the  National 
Park  Service,  despite  its  unusual  management  structure. 

"Our  mission  is  preservation,"  said  Jim  Meadows,  executive 
director  of  the  Presidio  Trust.  "Second  is  to  be  a  center  for 
scientific  research  and  new  technology.  If  you're  going  to  be  a 
home  for  new  technology,  you  can't  ignore  the  Internet." 

The  trust  is  selective  in  whom  it  rents  to,  and  even  companies 
with  purely  commercial  motives  must  give  something  back  to  the 
park,  Meadows  said.  For  example,  Alexa  Internet  employees 
volunteer  in  the  park  on  weekends,  and  the  company  brought 
along  a  non-profit  arm  called  Internet  Archives  that  is  creating  a 
permanent,  historical  record  of  the  World  Wide  Web  that  will 
someday  be  available  to  the  public. 

Founded  in  1776,  the  Presidio  was  occupied  continuously  for 
219  years  by  troops  from  three  nations  ~  Spain,  Mexico  and  the 
United  States.  Among  its  wonders  are  a  Spanish  house  believed 
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to  be  the  oldest  structure  in  San  Francisco,  Civil  War-era 
mansions  and  century-old  forests  of  cypress  and  pines  planted  in 
formal  rows. 

It  contains  a  national  cemetery,  where  generations  of  soldiers 
were  laid  to  rest,  and  an  unofficial  pet  cemetery,  where  parakeets 
and  hamsters  belonging  to  military  families  were  buried.  Seventy 
percent  of  the  park  is  open  space,  with  1 1  miles  of  hiking  trails 
and  14  miles  of  bike  routes  that  offer  magical  views  of  the 
Golden  Gate  and  San  Francisco  Bay. 

Although  the  base  was  not  formally  turned  over  to  the  park 
service  until  1996,  it  was  promised  to  the  park  system  under 
1972  legislation  sponsored  by  Rep.  Phil  Burton  at  the  urging  of 
environmentalist  Edgar  Wayburn. 

A  delicate  balance 

In  running  the  Presidio,  the  trust  must  balance  that  distinctive 
heritage  with  the  necessity  of  paying  for  the  park  with  a  budget 
that,  at  about  $38  million  this  year,  is  twice  the  size  of 
Yosemite's. 

"This  is  a  uniquely  difficult  situation,"  said  Amy  Meyer,  one  of 
seven  federally  appointed  board  members.  "It's  trying  to  figure 
out  what  you  can  do  in  the  space  and  how  you  can  be  all  things 
to  all  people.  It's  different  from  all  the  other  parks." 

The  critics  ignore  the  new  reality  of  the  Presidio,  added  Meyer, 
herself  a  longtime  champion  of  parks.  "We  have  a  fiduciary 
responsibility  here." 

Nor  did  the  old  management  plan  offer  a  vision  of  a  living  park, 
according  to  Meyer,  where  commercial  enterprise  coexists  with 
history  and  outdoor  recreation. 

"The  original  plan  painted  a  park  made  up  of  small  non-profits 
that  would  pay  reasonable  rents  and  be  dedicated  to  solving  the 
major  problems  of  the  world,"  she  said.  "It's  a  lovely  idea.  A 
bunch  of  people  sitting  in  offices  solving  the  world's  problems  is 
not  a  park." 

Amid  this  debate,  a  renaissance  of  the  Presidio  is  well  under 
way.  An  extensive  environmental  restoration  of  Crissy  Field  is 
almost  complete  and  has  opened  a  significant  new  stretch  of  San 
Francisco  Bay  waterfront  to  recreation. 

Famous  names  are  continually  being  added  to  a  who's  who  list  of 
tenants.  Robert  Redford's  Sundance  Institute  is  eyeing  the  old 
base  cinema  for  an  independent  film  showplace,  and  the  San 
Francisco  Film  Center  is  already  providing  post-production 
facilities  for  the  movie  industry. 

Plans  are  afoot  for  a  collaboration  with  the  Smithsonian 
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Institution,  which  could  eventually  include  joint  exhibits  and  a 
folk  life  festival.  A  Presidio  museum  will  someday  highlight  the 
rich  history  of  a  military  post  that  for  a  century  was  the  most 
important  Army  base  in  the  West. 

A  trio  of  major-league  charitable  foundations  —  Hewlett,  Packard 
and  Irvine  ~  is  exploring  the  idea  of  turning  a  collection  of 
hilltop  buildings  into  a  think  tank.  And  officials  are  close  to 
signing  the  deal  with  Lucas  to  replace  defunct  Letterman  hospital 
with  his  digital  film  center,  which  would  employ  2,500  people. 
The  biggest  lease  yet,  it  is  expected  to  bring  in  more  than  $5 
million  a  year. 

New  financial  reports  show  Presidio  revenues  will  reach  $24 
million  this  year,  an  increase  of  $10  million  over  last  year.  That 
is  two-thirds  of  the  way  toward  a  goal  of  $36  million  a  year  the 
trust  says  it  needs  by  2013.  Close  observers  said  those  revenues 
are  impressive. 

"If  the  trust  is  saying  they've  made  $24  million,  the  park  service 
thinks  that's  wildly  successful,"  said  Holly  Bundock,  a 
spokeswoman  for  the  regional  office  of  the  National  Park 
Service. 

But  trust  officials  also  say  their  costs  remain  enormous,  and  they 
are  a  long  way  from  declaring  success.  They  estimate  they  need 
to  spend  $450  million  for  capital  improvements  before  2013, 
when  all  federal  support  ends. 

They  badly  need  the  congressional  appropriations  that  will 
decline  over  the  next  1 3  years,  said  Craig  Middleton,  deputy 
director  of  operations  for  the  trust. 

Slower  pace 

As  the  Presidio  enjoys  the  fruits  of  the  roaring  Bay  Area 
economy,  some  observers  say  the  trust  can  afford  to  slow  the 
pace  of  development,  reduce  the  size  of  the  Lucas  project,  and 
even  set  aside  space  for  non-profit  organizations  that  are  being 
squeezed  by  high  rents  elsewhere  in  the  city. 

"Housing  rents  have  gone  up,  building  rents  have  gone  up  and 
the  value  of  land  has  gone  up,"  said  Don  Green,  an  economist 
who  advises  environmental  groups  on  the  Presidio's  budget. 
"Rather  than  $36  million  they  will  earn  $50  million,  probably  60 
or  70." 

Such  projections  mean  the  trust  could  scale  back  its  development 
plans,  he  argues.  "I'm  interested  in  seeing  them  do  the  least, 
rather  than  the  most." 

However,  the  trust's  financial  projections  are  based  on  a  middle- 
range  economy,  not  the  present  boom,  and  lease  rates  will  not 
always  be  at  record  levels,  Middleton  points  out. 
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"Yes,  we're  trying  to  move  quickly  and  take  advantage  of  the 
economy  while  we've  got  it.  I  think  any  prudent  steward  of  the 
land  would  do  the  same." 

He  added,  "To  the  extent  we  do  better  than  break  even,  all  that 
extra  money  will  go  into  programs  or  park  enhancements." 

The  environmentalists  acknowledge  the  financial  goals,  yet 
remain  critical  of  the  trust's  direction. 

"While  it's  true  they  have  to  respect  the  bottom  line,  the  fact  they 
can  make  more  money  than  they  thought  they  could  doesn't  mean 
making  money  at  the  Presidio  is  the  thing  they  ought  to  be 
doing,"  said  Johanna  Wald,  senior  attorney  for  the  Natural 
Resources  Defense  Council. 

"I  understand  they've  got  to  worry  about  the  bottom  line,"  she 
added.  "I  just  don't  think  it's  the  only  thing  they  should  be 
worrying  about." 

A  workshop  on  updating  the  Presidio's  General  Management 
Plan  Amendment  will  be  held  next  Wednesday  from  6  to  9  p.m. 
Take  the  shuttle  from  the  Lombard  Gate  to  the  Golden  Gate 
Club;  call  (415)  561-5418  for  details. 

Contact  Marilee  Enge  at  menge@sjmercurv.com  or  (415)  394- 
6895. 


|  A  Back  to  top  ~~|  San  Jose  Mercury  News  |  Home  |  Site  Index  |  Search  |  Feedback  |  Help  |  Customef  Service  | 


<  i:\i T1U/1X  COMPUTER  h 

$m:  SURPLUS,  INC 

^Tfte  Buy  and  Sell  OEM  Elecfronics  Surplus 

©  2000  Mercury  Center.  The  information  you  receive  online  from  Mercury  Center  is  protected 
by  the  copyright  laws  of  the  United  States.  The  copyright  laws  prohibit  any  copying, 
redistributing,  retransmitting,  or  repurposing  of  any  copyright-protected  material.  Mercury 
Center  privacy  policy 

Mb  •     . 


) 


http://www.sjmercury.com/premium/front/docs/presidio06.htm 


9/7/00 


rtx>v^iNr,  vv  o.uuni  .  LJMiin  /\mic  v^.  \^inuy  iviaiguns  in  i^uwinuciu  rigin 


rage 


GO.com 


GO  Kids    GO  Family    GO  Money     GO  Sports     GO  Home  $  fi  3  H 

ABOUT  GO  NETWORK  J  SIGN  IN  |  FREE  E-MAIL  (•     ABCNE 


Check  the  weather  at  your  in-laws, 
without  having  to  go  there. 


►  HOME 


►  NEWS  SUMMARY 


►  u.s. 


►  POLI1 


BUSINESS 


►  technology 


►  science 


►  health&living 

►  travel     


►  ESPN  SPORTS 


►_ET 


►  WE 

►  rei 


► 

►  ai 


TECH  HEADLINES 

Danni  Ashe  vs.  Cindy 
Margolis 


"T-rTTi 

Napstei  C  -.-., 

Answci  ;  A' I-,,-,!    • 

Bluetooth  technology? 

■.•Wi:0  - 

Out  of  Kids'  Hands 


SPECIAL-SERVICE! 


ABCNEWS.com 


SEND  PAGE  TO 
A  FRIEND 


TOOLS  AND 
HELPERS 


Danni  Ashe  vs. 
Cindy  Margolis 

Cyber  Catfight  Over  Who's  the  World's 
Most  Downloaded 


Cindy  Margolis  at  the  NATPE 
Convention  in  New  Orleans.  As  far  as 
Web  traffic  goes,  Margolis'  site, 
Cindymargolis.com,  trailed  Danni's 
Hard  Drive  by  a  significant  margin. 
(Judi  Bottoni/AP  Photo) 


By  Melanie  Axelrod 

££NEWS.com 

Sept.  8  —  It  hasn't  escalated  to  the  level  of  a 

Celebrity  Deathmatch  yet,  but  two  of  the 

Internet's  most  downloaded  women  are 

sparring  over  who's  really  the  cyber- fairest  of 

them  all. 

Danni  Ashe,  a  nude  model  and  founder  of  adult 
Web  site  "Danni's  Hard  Drive,"  was  crowned  by  the 
Guinness  Book  of  World  Records  as  the  "Most 
Downloaded  Woman"  in  the  world,  dethroning 
Playboy  actress,  supermodel  and  now  late-night 
show  host  Cindy  Margolis. 

"I  knew  all  along  I  had  more  Internet  fans  than 
Cindy,  but  I  was  busy  running  my  business  and 
didn't  pay  much  attention  to  the  hoopla,"  gloated 
Ashe  in  a  statement  after  the  Guinness 
announcement. 

But  wait.  Who  really  won  —  Danni  or  Cindy? 

Guinness  first  bestowed  the  title  on  Margolis, 
who  then  touted  it  on  her  Web  site.  But  then,  the 
fickle  record-keepers  turned  it  over  to  Ashe  after 
seeing  research  and  data  presented  by  Ashe  and 
Alexa  Research  of  San  Francisco,  a  company  that 
tracks  page  views  and  Web  site  popularity  ratings. 

This  turnabout,  of  course,  started  a  cat  fight 
between  the  two  babelicious  blondes. 

But  now  it  appears  there  may  be  a  happy  ending 
for  each.  Guinness  spokesman  Neil  Hayes  says  both 
of  the  buxom  beauties  won,  but  in  different 
categories. 

"In  creating  two  new  categories  in  the  'most 
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downloaded'  area,  we  are  simply  responding  to  the 
different  ways  in  which  new  media  has  developed," 
he  said  in  an  e-mail  statement. 

"In  this  instance,  a  number  of  issues  were  raised 
by  competing  claims  and  the  comparisons  between 
them.  Most  of  them  focused  on  the  fact  there  are  two 
inherently  different  kinds  of  Web  site:  subscription- 
based  [and]  free  sites." 
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Danni  Ashe,  a  nude  model  and  founder  of  adult  Web  site  "Danni's  Hard 
Drive,"  was  crowned  "Most  Downloaded  Woman"  in  the  world. 
(ABCNEWS.com) 

Hayes  also  said  Guinness  has  made  distinctions  as 
such  in  the  past.  For  example,  he  said,  it  has 
"employed  similar  distinctions  between  attendance 
records  for  free  and  paid-for  concerts,  and  for  print 
runs  of  free  and  paid-for  books.  All  we  are  doing  in 
this  instance  is  taking  our  existing  criteria  into  a  new 
medium." 

According  to  Guinness,  Ashe  had  more  than  240 
million  downloads  in  1999  from  Danni's  Hard  Drive, 
a  subscription  site.  Margolis'  people  recorded  53 
million  downloads  only  using  the  numbers  she 
racked  up  based  on  America  Online  downloads 
alone.  (Margolis's  agents  plan  to  resubmit  additional 
calculations,  according  to  Hayes.) 

"It  did  come  as  a  surprise,"  Ashe  said  in  a 
telephone  interview,  when  asked  about  the  change  in 
titles.  "I  have  more  [downloads]  no  matter  how  you 
want  to  add  it  up." 

Neither  Margolis  nor  her  representatives  returned 
phone  calls  for  this  story. 

Millions  and  Millions  Served 

As  far  as  Web  traffic  goes,  Margolis'  site, 
Cindymargolis.com,  trailed  Danni's  Hard  Drive  by  a 
significant  margin,  according  to  Alexa  Research 
numbers.  Cindymargolis.com  boasted  a  little  more 
than  2  million  page  views  in  May  of  2000,  vs.  well 
over  25  million  page  views  during  the  same  month 
on  Ashe's  site. 

Ashe,  who  says  she's  content  with  her  new  title, 
wants  to  be  more  than  just  the  most  heavily 
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trafficked  pay-for  Web  site.  She  wants  to  hold  both 
records,  saying  that  even  on  her  free-downloads  site, 
she  got  more  than  120  million  downloads  in  this  past 
year,  and  around  the  same  number  on  her  pay-per- 
download  site. 

"The  thing  that  really  interests  me  is  that  Cindy's 
numbers,  the  ones  that  have  been  submitted  thus  far, 
came  from  AOL,"  Ashe  said.  "[And]  that's  a  paid 
subscription  service  too." 

Building  a  Name  for  Herself 

In  1995  Ashe  started  out  with  just  $8,000  worth  of 
computer  equipment  and  a  little  HTML  knowledge. 
Now  she's  the  focus  of  articles  in  and  The  Industry 
Standard  for  the  fact  that  she  and  the  popularity  of 
her  site  provide  one  of  the  few  examples  of  how  a 
Web-based  business —  albeit,  a  soft-core  porn  site  — 
can  be  profitable. 

"I've  poured  my  heart  into  [the  site],"  Ashe  said. 
"It's  gone  from  something  in  my  bedroom  to  a  large 
corporation  with  42  people,  and  on  the  road  to  make 
$7  million  this  year. .  .it's  been  so  incredibly 
gratifying. 

"I  think  that  Cindy's  career  is  really  kind  of  based 
on  this  title,"  she  continued,  "And  it's  difficult  for 
her  to  lose  it.  Right  now  she's  still  got  it,  but  not  for 
much  longer.  "■ 
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Privacy  groups  criticize  new  Amazon 
policy 

By  Patricia  Jacobus 

Staff  Writer,  CNET  News.com 

September  13,  2000,  12:40  p.m.  PT 

Amazon. corn's  new  privacy  policy  could  put  customers  at  risk, 
according  to  two  watchdog  groups  that  have  recently  cut  ties  with  the 
online  bookseller. 

One  of  the  groups,  the  Electronic  Privacy  Information  Center  (EPIC)-a 
research  center  in  Washington,  D.C.-pulled  its  books  from  Amazon's 
shelves  last  night,  ending  a  four-year  relationship.  The  move  was  a  way  of 
protesting  a  common  practice  by  online  retailers  of  periodically  changing 
privacy  rules,  said  Sarah  Andrews,  a  policy  analyst  at  EPIC. 
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"Privacy  policies  are  generally  vague,  often 
contradictory  and  confusing,"  she  said.  "This  is 
our  way  of  showing  that  consumers  shouldn't  be 
asked  to  rely  on  a  company's  self-regulation  for 
protection." 

Amazon  spokesman  Bill  Curry  acknowledged 
that  the  company  changed  its  policy  two  weeks 
ago.  It  alerts  customers  that  information  about 
them  could  be  considered  as  part  of  the 
company's  assets  in  the  "unlikely  event  that 
Amazon.com  is  acquired." 

"The  new  policy  is  more  constraining  on  Amazon 
and  highlights  two  unlikely  conditions,"  Curry 
said. 


But  EPIC  and  Junkbusters,  a  privacy 
clearinghouse  in  New  Jersey,  charge  that  Amazon  changed  its  policy  after 
witnessing  the  heavy  criticism  Toysmart.com  endured  when  the  online  toy 
store  tried  to  claim  names  and  information  about  250,000  customers  as  an 
asset  that  could  be  sold.  The  Web  site  originally  promised  its  customers  that 
information  about  them  would  never  be  shared. 

The  move  came  just  hours  before  a  global  privacy  forum  kicked  off  this  week 
in  Washington,  D.C. 

In  addition,  Amazon  is  facing  several  class-action  lawsuits  in  U.S.  District 
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Court  in  Seattle  on  the  grounds  of  electronic  privacy  wiiri»u  nr'uar 

invasion.  The  lawsuits  stem  from  the  company's  security,  P"vacy 

implementation  of  technology  acquired  with  Alexa  Internet  issues  make  Net 

one  year  ago.  Alexa  makes  software  that  monitors  Web  users  uneasy 
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Privacy  concerns  have  become  increasingly  important  as  many  Web 
businesses  have  engaged  in  the  practice  of  collecting  personal  data  from 
visitors.  Organizations  such  as  EPIC  and  Junkbusters  have  fought  for 
consumer  rights,  lobbying  politicians  and  urging  the  Federal  Trade 
Commission  to  investigate  companies  that  illegally  sell  that  data. 

So  far,  regulators  have  not  stepped  in  on  this  latest  attack  against  Amazon, 
Andrews  said. 


Capitol  Hill  split  on  Napster 

Joe  Montana  throws  weight 
behind  venture  capitalism 

Macromedia  aims  to  lighten 
burden  for  Flash  developer 


Personal  Technology 

Motorola  to  boost  stake  in 
OpenTV 

Siemens  sells  troubled  chip 
plant 


The  nonprofit  EPIC  has  been  a  member  of  Amazon's  Advantage  program 
since  1996.  The  program  works  as  a  referral  service  for  those  interested  in 
EPIC's  publications.  Andrews  could  not  say  how  many  of  EPIC's  books  have 
been  sold  through  Amazon,  but  she  did  acknowledge  that  her  job  as  the 
publications  director  is  sure  to  get  tougher. 
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"I  used  to  just  ship  40  books  at  one  time  to  Amazon  and  now  I'll  have  to  send 
them  to  40  different  addresses,"  she  said.  But  the  hassle  is  worth  it,  she  said. 
"This  is  the  first  step.  We  really  want  to  send  the  message  that  some  sort  of 
privacy  legislation  is  needed  to  regulate  the  policies  of  companies  like 
Amazon." 
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(BW)  National  Law  Library  Site 
Climbs  in  Rankings 

Business  Editors  &  Legal/Internet  Writers 
(c)  2000  Business  Wire. 

HOUSTON--(BUSINESS  WIRE)--Sept.  15,  2000- 
Internet  Law  Library  Inc.  (OTCBB:ELAW), 
http ://www.interlawlibrary .com,  subsidiary  National  Law 
Library  Inc.,  announced  today  that  its  legal  research  site, 
http://www.itislaw.com  has  climbed  in  national  rankings 
for  traffic  hits  and  is  now  in  the  top  100,000  commercial 
Web  sites  on  the  internet  as  measured  by  Alexa(R). 
Industry  resources  estimate  that  there  are  more  than  23 
million  commercial  Web  sites  on  the  Internet. 

The  site  also  receives  five  stars,  out  of  a  possible  five 
stars  for  both  freshness  and  speed.  "The  National  Law 
Library  is  proud  of  our  continued  progress  in  service  to 
the  legal  community.  Through  our  Web  site  we  strive  to 
achieve  the  highest  quality  service  to  the  legal 
community,"  said  David  Harriman,  president. 

Internet  Law  Library  Inc.  owns  subsidiaries  that  operate 
Internet  sites  that  provide  subscription  access  to  databases 
used  for  tracking  pending  legislation  and  for  performing 
legal  and  medical  research.  They  are:  National  Law 
Library  (http://www.itislaw.com),  GoverNet  Affairs 
(http://www.govaffs.com),  Brief  Reporter 
(http://www.briefreporter.com),  Compass  Data  Systems 
(http://www.compassdata.com),  and  ITIS  Inc. 
(http://www.itisinc.com). 

Certain  statements  in  this  release  constitute  forward- 
looking  statements.  Such  forward-looking  statements 
involve  known  and  unknown  risks,  uncertainties  and  other 
factors  that  may  cause  the  actual  results,  performance  or 
achievements  of  Internet  Law  Library  Inc.  and/or  its 
subsidiary  companies  to  be  materially  different  from  those 
expressed  or  implied  by  such  forward-looking  statements. 
Such  factors  include:  general  economic  and  business 
conditions;  competition;  success  of  operating  initiatives; 
development  of  capital  and  operating  costs;  market 
conditions;  advertising  and  promotional  efforts;  adverse 
publicity;  changes  in  business  strategy  or  development 
plans;  quality  of  management  and  other  personnel;  and 
government  regulations. 
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Behind    the 
Scenes   at 


Online's  and 
Outsells  Conference 


The  sign  above  the  entrance  to  the  Camelback  Inn,  Scottsdale,  Arizona,  pro- 
claims it  to  be  "Where  Time  Stands  Still."  Attendees  at  the  Buying  &  Selling 
eContent  conference,  held  there  April  3-4,  2000,  instead  found  time  moving 
rather  swiftly.  A  densely  packed  program,  featuring  a  range  of  econtent  buy- 
ers and  sellers,  a  variety  of  industries,  and  many  exciting  technologies,  was 
leavened  by  multiple  networking  opportunities — including  a  golf  tournament, 
a  Southwestern  dinner  complete  with  gaming  and  musical  entertainment, 
lunches  outside  on  the  sun-drenched  patio,  and  informal  discussions  all  over 
the  place.  Coproduced  by  Online  Inc.  and  Outsell  Inc,  the  conference  also 
allowed  time  for  one-on-one  meetings  with  Outsell  analysts  and  conversations 
with  Online  editors. 

There  was  no  exhibit  hall  at  Buying  &  Selling  eContent,  although  sponsors 
had  tabletops  to  display  literature  and  talk  with  attendees.  Sponsors  included 
Digital  Owl,  Media  Xpress,  NielsenZ/NetRatings,  Northern  Light, 
Screaming  Media,  and  Veronis  Suhler. 


Attendees  enjoyed  informal  discussions  over  conference-sponsored  lunches. 


KEYNOTE  VIEWPOINTS 

Mark  Walsh  of  VerticalNet  key- 
noted  the  first  day.  Commenting  on 
the  new  content  equation  that  mar- 
ries content  with  commerce,  Walsh 
noted  that  "what  sticks  to  the  side  of 
the  pipe"  is  content  and  claimed  that 
"satisfied  buyers  validate  the  sell 
side."  He  evidenced  a  deep  dislike  of 
consortia,  saying  they  band  together 
for  the  sole  purpose  of  "hammering 
vendors,"  causing  a  suicidal  spiral 
toward  lower  and  unsustainable 
prices.  He  believes  in  archiving  infor- 
mation, seeing  it  as  the  source  for 
future  answers,  and  doesn't  believe 
that  contract  pricing  will  remain  an  im- 
portant pricing  mechanism.  Instead, 
spot-and-open  buying  will  predominate. 


The  distinction  between  advertising 
and  content  will  blur,  but  "good  stuff 
will  win." 

While  Walsh  concentrated  on  the 
verticalization  of  markets,  Brewster 
Kahle,  the  second  day's  keynoter, 
presented  a  variety  of  interesting 
topographical  maps  of  the  Internet 
that  showed  how  different  mindsets 
shape  people's  views  of  the  Internet. 
If  anyone  on  the  planet  has  a  clear 
understanding  of  the  size,  scope,  and 
shape  of  the  Web,  it's  Kahle.  His 
landmark  efforts  to  archive  the  Web, 
immortalized  by  his  gift  to  the 
Library  of  Congress  of  a  couple  of 
terabytes  of  digital  information 
(encased  in  a  bright  red  sculpture  of 
moving  text  and  computer  monitors), 


show  how  differently  the  Internet  is 
perceived  and  used  internationally. 
The  popularity  of  sites— Kahle  de- 
scribes this  as  sites  with  the  most 
attention  paid  to  them — differs  con- 
siderably from  country  to  country. 
Getting  and  keeping  people's  atten- 
tion is  a  major  challenge.  Although 
Amazon  now  owns  Kahle's  Alexa  Inter- 
net, his  worldview  is  stiTTgrounded 
in  the  non-commercial. 

OUTSELL  RESEARCH 

Throughout  the  two-day  confer- 
ence, presentations  by  Outsell  ana- 
lysts enlightened  the  attendees. 
Directly  following  Monday's  keynote 
speech,  Anthea  Stratigos  delivered  a 
very  cogent  and  practical  summation 
of  the  major  trends,  market  size,  and 
overall  state  of  the  information 
industry.  She  finds  that  people  today 
are  drawn  toward  free,  instant  infor- 
mation. Even  with  no  training,  they 
rate  their  own  searching  aptitude  as 
"very  adept"  or  "skilled",  something 
which  makes  information  profession- 
als shudder.  Later,  in  an  informal 
roundtable  session,  she  elicited  many 
opinions  from  buyers  and  sellers  con- 
cerning their  experiences  and  views 
of  the  future. 

Dick  Curtis  presented  Outsell's 
research  on  pricing  and  introduced 
its  I-Price  Study,  a  methodology  for 
benchmarking  content  contracts.  He 
advised  attendees  to  understand 
user  needs,  know  clients'  businesses, 
and  work  together  to  solve  problems. 
Lynn  Dagar  discussed  Outsell's  find- 
ings on  loyalty,  complete  with  a  case 
study  from  OneSource.  Differing 
with  Walsh,  Dagar  makes  a  distinc- 
tion between  user  satisfaction  and 
user  loyalty.  The  first  reflects  feel- 
ings, the  second  behavior.  Just  as 
vendors  should  understand  loyalty 
measurement  to  compete  more  effec- 
tively, internal  information  providers 
should  measure  loyalty  to  increase 
awareness  of  their  role  and  offerings, 
and  justify  their  existence. 

COMPLEXITIES  OF  ECONTENT 

Individual  speakers  tended  to  rep- 
resent either  the  buying  or  selling 
side  of  the  issue.  However,  as  the 
conference  progressed,  it  became  ap- 
parent that  these  distinctions  were 
less  than  useful.  As  Stratigos  put  it, 
"Everyone's  a  vendor."  Large  enterprise 
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buyers,  represented  by  Ford  Motor 
Company's  Bob  Schwarzwalder, 
Deutsche  Bank's  Willem  Noorlander 
(now  with  TFPL),  Dow  Europe's 
Stefano  Caparusso,  and  Xerox's  Laura 
Tucker,  among  others,  stressed  the 
importance  of  customizing  content, 
consortia  savings,  and  unique  needs. 
Inconsistencies  in  pricing  and  diffi- 
culties in  negotiating  global  contracts 
were  cited  as  major  problems.  The 
necessity  of  managing  information  as- 
sets on  a  global  scale  is  too  frequently 
complicated  by  the  locally  oriented, 
sales-commission  structures  of  sellers. 

Concerns  of  sellers  centered  on 
such  topics  as  payment  mechanisms, 
digital  rights,  identifying  niche  mar- 
kets, pricing  strategies,  and  the  chal- 
lenges of  channel  conflict.  Gale 
Group's  Wes  Crews  spoke  forth- 
rightly  on  what  his  company  learned 
from  its  successes  and  failures. 
Factiva's  Clare  Hart  offered  three 
keys  to  success:  a  clear  strategy  for 
the  future,  understanding  of  key  dif- 
ferentiators among  customers  and 
competitors,  and  sensible  pricing 
models.  Primark's  Bill  O'Conor  stated 
that  sellers  need  to  extend  and  adapt 
assets,  become  facilitators,  not  con- 
trollers, and  prepare  for  the  second 
wave  of  the  Internet. 

Andrew  Elston,  in  explaining  how 
Qpass  manages  payments  for  a  num- 
ber of  information  providers,  disagreed 
with  Dagar's  loyalty  contentions, 
saying  that  "customers  are  Internet 


Nomads— they  have  no  loyalty." 
Several  speakers  extolled  the  syndica- 
tion model,  with  the  general  belief 
being  that  people  will  pay  for  pre- 
mium information.  A  warning,  how- 
ever, was  sounded  by  Mike  O'Donnell 
of  iCopyright.com,  who  noted  that 
"every  piece  of  information,  from  an 
article  to  a  music  clip,  can  be  licensed 
as  a  standalone  product." 

Industry  observers  Jeffrey  Dearth 
(DeSilva  and  Phillips  Media  Invest- 
ment Bankers)  and  Roger  Krakoff 
(Veronis,  Suhler  &  Associates)  took  a 
broad  and  positive  view  of  the  content 
industry.  According  to  Krakoff,  "Con- 
tent is  all-encompassing — explicit  not 
implicit,  visible  not  invisible,  valuable 
not  free." 

The  closing  panel,  given  the  task  of 
ruminating  on  changing  roles  and 
the  future  of  content,  had  a  variety  of 
opinions.  Most  forceful  was  Bob  Ains- 
bury  of  EoExchange,  who  put  his 
own  uniquely  humorous  twist  on  the 
Content,  Community,  Commerce  man- 
tra so  prevalent  today.  Overall,  the 
panel  agreed  that  the  content  world 
was  changing  rapidly,  resulting  in 
significant  role  alterations  for  both 
buyers  and  sellers  of  econtent. 

Building  on  the  success  of  this  first 
Buying  &  Selling  eContent  high-level 
conference,  the  second  conference 
will  be  held  April  2-3,  2001,  with  the 
eContent  golf  tournament  on  Sunday, 
April  1st.  The  venue  will  again  be  the 
Camelback  Inn,  Scottsdale,  Arizona. 


talent 


■>  . 


